Action not permitted
Modal body text goes here.
Modal Title
Modal Body
CVE-2018-2952 (GCVE-0-2018-2952)
Vulnerability from cvelistv5
Published
2018-07-18 13:00
Modified
2024-10-02 20:14
Severity ?
VLAI Severity ?
EPSS score ?
CWE
- Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit.
Summary
Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Concurrency). Supported versions that are affected are Java SE: 6u191, 7u181, 8u172 and 10.0.1; Java SE Embedded: 8u171; JRockit: R28.3.18. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 3.7 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).
References
Impacted products
| Vendor | Product | Version | ||
|---|---|---|---|---|
| Oracle Corporation | Java |
Version: Java SE: 6u191 Version: 7u181 Version: 8u172 Version: 10.0.1; Java SE Embedded: 8u171; JRockit: R28.3.18 |
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-05T04:36:39.027Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "RHSA-2018:2254",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT",
"x_transferred"
],
"url": "https://access.redhat.com/errata/RHSA-2018:2254"
},
{
"name": "[debian-lts-announce] 20181122 [SECURITY] [DLA 1590-1] openjdk-7 security update",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "https://lists.debian.org/debian-lts-announce/2018/11/msg00026.html"
},
{
"name": "RHSA-2018:3007",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT",
"x_transferred"
],
"url": "https://access.redhat.com/errata/RHSA-2018:3007"
},
{
"name": "104765",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/104765"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html"
},
{
"name": "RHSA-2018:2713",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT",
"x_transferred"
],
"url": "https://access.redhat.com/errata/RHSA-2018:2713"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "https://security.netapp.com/advisory/ntap-20180726-0001/"
},
{
"name": "RHSA-2018:2242",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT",
"x_transferred"
],
"url": "https://access.redhat.com/errata/RHSA-2018:2242"
},
{
"name": "RHSA-2018:2255",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT",
"x_transferred"
],
"url": "https://access.redhat.com/errata/RHSA-2018:2255"
},
{
"name": "USN-3747-1",
"tags": [
"vendor-advisory",
"x_refsource_UBUNTU",
"x_transferred"
],
"url": "https://usn.ubuntu.com/3747-1/"
},
{
"name": "RHSA-2018:2575",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT",
"x_transferred"
],
"url": "https://access.redhat.com/errata/RHSA-2018:2575"
},
{
"name": "RHSA-2018:2256",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT",
"x_transferred"
],
"url": "https://access.redhat.com/errata/RHSA-2018:2256"
},
{
"name": "RHSA-2018:2576",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT",
"x_transferred"
],
"url": "https://access.redhat.com/errata/RHSA-2018:2576"
},
{
"name": "RHSA-2018:2241",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT",
"x_transferred"
],
"url": "https://access.redhat.com/errata/RHSA-2018:2241"
},
{
"name": "RHSA-2018:2253",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT",
"x_transferred"
],
"url": "https://access.redhat.com/errata/RHSA-2018:2253"
},
{
"name": "RHSA-2018:2568",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT",
"x_transferred"
],
"url": "https://access.redhat.com/errata/RHSA-2018:2568"
},
{
"name": "RHSA-2018:2569",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT",
"x_transferred"
],
"url": "https://access.redhat.com/errata/RHSA-2018:2569"
},
{
"name": "USN-3735-1",
"tags": [
"vendor-advisory",
"x_refsource_UBUNTU",
"x_transferred"
],
"url": "https://usn.ubuntu.com/3735-1/"
},
{
"name": "RHSA-2018:2712",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT",
"x_transferred"
],
"url": "https://access.redhat.com/errata/RHSA-2018:2712"
},
{
"name": "RHSA-2018:3008",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT",
"x_transferred"
],
"url": "https://access.redhat.com/errata/RHSA-2018:3008"
},
{
"name": "RHSA-2018:2286",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT",
"x_transferred"
],
"url": "https://access.redhat.com/errata/RHSA-2018:2286"
},
{
"name": "DSA-4268",
"tags": [
"vendor-advisory",
"x_refsource_DEBIAN",
"x_transferred"
],
"url": "https://www.debian.org/security/2018/dsa-4268"
},
{
"name": "RHSA-2018:2283",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT",
"x_transferred"
],
"url": "https://access.redhat.com/errata/RHSA-2018:2283"
},
{
"name": "1041302",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK",
"x_transferred"
],
"url": "http://www.securitytracker.com/id/1041302"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbst03882en_us"
},
{
"name": "USN-3734-1",
"tags": [
"vendor-advisory",
"x_refsource_UBUNTU",
"x_transferred"
],
"url": "https://usn.ubuntu.com/3734-1/"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbst03928en_us"
}
],
"title": "CVE Program Container"
},
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2018-2952",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2024-10-02T18:11:07.777376Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2024-10-02T20:14:51.292Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "Java",
"vendor": "Oracle Corporation",
"versions": [
{
"status": "affected",
"version": "Java SE: 6u191"
},
{
"status": "affected",
"version": "7u181"
},
{
"status": "affected",
"version": "8u172"
},
{
"status": "affected",
"version": "10.0.1; Java SE Embedded: 8u171; JRockit: R28.3.18"
}
]
}
],
"datePublic": "2018-03-27T00:00:00",
"descriptions": [
{
"lang": "en",
"value": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Concurrency). Supported versions that are affected are Java SE: 6u191, 7u181, 8u172 and 10.0.1; Java SE Embedded: 8u171; JRockit: R28.3.18. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 3.7 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L)."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit.",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2019-05-17T19:06:03",
"orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
"shortName": "oracle"
},
"references": [
{
"name": "RHSA-2018:2254",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2018:2254"
},
{
"name": "[debian-lts-announce] 20181122 [SECURITY] [DLA 1590-1] openjdk-7 security update",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "https://lists.debian.org/debian-lts-announce/2018/11/msg00026.html"
},
{
"name": "RHSA-2018:3007",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2018:3007"
},
{
"name": "104765",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/104765"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html"
},
{
"name": "RHSA-2018:2713",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2018:2713"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://security.netapp.com/advisory/ntap-20180726-0001/"
},
{
"name": "RHSA-2018:2242",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2018:2242"
},
{
"name": "RHSA-2018:2255",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2018:2255"
},
{
"name": "USN-3747-1",
"tags": [
"vendor-advisory",
"x_refsource_UBUNTU"
],
"url": "https://usn.ubuntu.com/3747-1/"
},
{
"name": "RHSA-2018:2575",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2018:2575"
},
{
"name": "RHSA-2018:2256",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2018:2256"
},
{
"name": "RHSA-2018:2576",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2018:2576"
},
{
"name": "RHSA-2018:2241",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2018:2241"
},
{
"name": "RHSA-2018:2253",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2018:2253"
},
{
"name": "RHSA-2018:2568",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2018:2568"
},
{
"name": "RHSA-2018:2569",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2018:2569"
},
{
"name": "USN-3735-1",
"tags": [
"vendor-advisory",
"x_refsource_UBUNTU"
],
"url": "https://usn.ubuntu.com/3735-1/"
},
{
"name": "RHSA-2018:2712",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2018:2712"
},
{
"name": "RHSA-2018:3008",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2018:3008"
},
{
"name": "RHSA-2018:2286",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2018:2286"
},
{
"name": "DSA-4268",
"tags": [
"vendor-advisory",
"x_refsource_DEBIAN"
],
"url": "https://www.debian.org/security/2018/dsa-4268"
},
{
"name": "RHSA-2018:2283",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2018:2283"
},
{
"name": "1041302",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK"
],
"url": "http://www.securitytracker.com/id/1041302"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbst03882en_us"
},
{
"name": "USN-3734-1",
"tags": [
"vendor-advisory",
"x_refsource_UBUNTU"
],
"url": "https://usn.ubuntu.com/3734-1/"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbst03928en_us"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "secalert_us@oracle.com",
"ID": "CVE-2018-2952",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "Java",
"version": {
"version_data": [
{
"version_affected": "=",
"version_value": "Java SE: 6u191"
},
{
"version_affected": "=",
"version_value": "7u181"
},
{
"version_affected": "=",
"version_value": "8u172"
},
{
"version_affected": "=",
"version_value": "10.0.1; Java SE Embedded: 8u171; JRockit: R28.3.18"
}
]
}
}
]
},
"vendor_name": "Oracle Corporation"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Concurrency). Supported versions that are affected are Java SE: 6u191, 7u181, 8u172 and 10.0.1; Java SE Embedded: 8u171; JRockit: R28.3.18. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 3.7 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L)."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit."
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "RHSA-2018:2254",
"refsource": "REDHAT",
"url": "https://access.redhat.com/errata/RHSA-2018:2254"
},
{
"name": "[debian-lts-announce] 20181122 [SECURITY] [DLA 1590-1] openjdk-7 security update",
"refsource": "MLIST",
"url": "https://lists.debian.org/debian-lts-announce/2018/11/msg00026.html"
},
{
"name": "RHSA-2018:3007",
"refsource": "REDHAT",
"url": "https://access.redhat.com/errata/RHSA-2018:3007"
},
{
"name": "104765",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/104765"
},
{
"name": "http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html",
"refsource": "CONFIRM",
"url": "http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html"
},
{
"name": "RHSA-2018:2713",
"refsource": "REDHAT",
"url": "https://access.redhat.com/errata/RHSA-2018:2713"
},
{
"name": "https://security.netapp.com/advisory/ntap-20180726-0001/",
"refsource": "CONFIRM",
"url": "https://security.netapp.com/advisory/ntap-20180726-0001/"
},
{
"name": "RHSA-2018:2242",
"refsource": "REDHAT",
"url": "https://access.redhat.com/errata/RHSA-2018:2242"
},
{
"name": "RHSA-2018:2255",
"refsource": "REDHAT",
"url": "https://access.redhat.com/errata/RHSA-2018:2255"
},
{
"name": "USN-3747-1",
"refsource": "UBUNTU",
"url": "https://usn.ubuntu.com/3747-1/"
},
{
"name": "RHSA-2018:2575",
"refsource": "REDHAT",
"url": "https://access.redhat.com/errata/RHSA-2018:2575"
},
{
"name": "RHSA-2018:2256",
"refsource": "REDHAT",
"url": "https://access.redhat.com/errata/RHSA-2018:2256"
},
{
"name": "RHSA-2018:2576",
"refsource": "REDHAT",
"url": "https://access.redhat.com/errata/RHSA-2018:2576"
},
{
"name": "RHSA-2018:2241",
"refsource": "REDHAT",
"url": "https://access.redhat.com/errata/RHSA-2018:2241"
},
{
"name": "RHSA-2018:2253",
"refsource": "REDHAT",
"url": "https://access.redhat.com/errata/RHSA-2018:2253"
},
{
"name": "RHSA-2018:2568",
"refsource": "REDHAT",
"url": "https://access.redhat.com/errata/RHSA-2018:2568"
},
{
"name": "RHSA-2018:2569",
"refsource": "REDHAT",
"url": "https://access.redhat.com/errata/RHSA-2018:2569"
},
{
"name": "USN-3735-1",
"refsource": "UBUNTU",
"url": "https://usn.ubuntu.com/3735-1/"
},
{
"name": "RHSA-2018:2712",
"refsource": "REDHAT",
"url": "https://access.redhat.com/errata/RHSA-2018:2712"
},
{
"name": "RHSA-2018:3008",
"refsource": "REDHAT",
"url": "https://access.redhat.com/errata/RHSA-2018:3008"
},
{
"name": "RHSA-2018:2286",
"refsource": "REDHAT",
"url": "https://access.redhat.com/errata/RHSA-2018:2286"
},
{
"name": "DSA-4268",
"refsource": "DEBIAN",
"url": "https://www.debian.org/security/2018/dsa-4268"
},
{
"name": "RHSA-2018:2283",
"refsource": "REDHAT",
"url": "https://access.redhat.com/errata/RHSA-2018:2283"
},
{
"name": "1041302",
"refsource": "SECTRACK",
"url": "http://www.securitytracker.com/id/1041302"
},
{
"name": "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbst03882en_us",
"refsource": "CONFIRM",
"url": "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbst03882en_us"
},
{
"name": "USN-3734-1",
"refsource": "UBUNTU",
"url": "https://usn.ubuntu.com/3734-1/"
},
{
"name": "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbst03928en_us",
"refsource": "CONFIRM",
"url": "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbst03928en_us"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
"assignerShortName": "oracle",
"cveId": "CVE-2018-2952",
"datePublished": "2018-07-18T13:00:00",
"dateReserved": "2017-12-15T00:00:00",
"dateUpdated": "2024-10-02T20:14:51.292Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1",
"vulnerability-lookup:meta": {
"nvd": "{\"cve\":{\"id\":\"CVE-2018-2952\",\"sourceIdentifier\":\"secalert_us@oracle.com\",\"published\":\"2018-07-18T13:29:02.960\",\"lastModified\":\"2024-11-21T04:04:49.557\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Concurrency). Supported versions that are affected are Java SE: 6u191, 7u181, 8u172 and 10.0.1; Java SE Embedded: 8u171; JRockit: R28.3.18. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 3.7 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).\"},{\"lang\":\"es\",\"value\":\"Vulnerabilidad en los componentes Java SE, Java SE Embedded y JRockit de Oracle Java SE (subcomponente: Concurrency). Las versiones compatibles que se han visto afectadas son JavaSE: 6u191, 7u181, 8u172 y 10.0.1; Java SE Embedded: 8u171; JRockit: R28.3.18. Una vulnerabilidad dif\u00edcilmente explotable permite que un atacante sin autenticar que tenga acceso a red por m\u00faltiples protocolos comprometa la seguridad de Java SE, Java SE Embedded y JRockit. Los ataques exitosos a esta vulnerabilidad pueden dar lugar a que el atacante consiga provocar una denegaci\u00f3n de servicio parcial (DoS parcial) de Java SE, Java SE Embedded y JRockit. Nota: Esta vulnerabilidad aplica a la implementaci\u00f3n del cliente y el servidor de Java. Esta vulnerabilidad puede ser explotada mediante aplicaciones Java Web Start en sandbox y applets Java en sandbox. Tambi\u00e9n puede ser explotada proporcionando datos a las API en los componentes especificados sin emplear aplicaciones Java Web Start o applets Java en sandbox, como a trav\u00e9s de un servicio web. CVSS 3.0 Base Score 3.7 (impactos en la disponibilidad). Vector CVSS: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).\"}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L\",\"baseScore\":3.7,\"baseSeverity\":\"LOW\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"HIGH\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"LOW\"},\"exploitabilityScore\":2.2,\"impactScore\":1.4}],\"cvssMetricV2\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"2.0\",\"vectorString\":\"AV:N/AC:M/Au:N/C:N/I:N/A:P\",\"baseScore\":4.3,\"accessVector\":\"NETWORK\",\"accessComplexity\":\"MEDIUM\",\"authentication\":\"NONE\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"PARTIAL\"},\"baseSeverity\":\"MEDIUM\",\"exploitabilityScore\":8.6,\"impactScore\":2.9,\"acInsufInfo\":false,\"obtainAllPrivilege\":false,\"obtainUserPrivilege\":false,\"obtainOtherPrivilege\":false,\"userInteractionRequired\":false}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"NVD-CWE-noinfo\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:jdk:1.6.0:update191:*:*:*:*:*:*\",\"matchCriteriaId\":\"0CC16ECF-A6C1-4B1F-B955-3A4694E0A899\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:jdk:1.7.0:update181:*:*:*:*:*:*\",\"matchCriteriaId\":\"20B37A10-DB47-4CDA-8DAD-CA9BB4362935\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:jdk:1.8.0:update172:*:*:*:*:*:*\",\"matchCriteriaId\":\"C6BB93E3-3983-40FD-A119-11334C707755\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:jdk:10.0.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"3C103C17-E4A9-40A2-959B-29547D706DFC\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:jre:1.6.0:update191:*:*:*:*:*:*\",\"matchCriteriaId\":\"D3F946D7-1480-43D7-94B1-10274261922C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:jre:1.7.0:update181:*:*:*:*:*:*\",\"matchCriteriaId\":\"F1CBA5EE-A49F-4000-8737-FC2C7F0E8CF7\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:jre:1.8.0:update172:*:*:*:*:*:*\",\"matchCriteriaId\":\"788BDADB-6F4E-4DFD-BE2E-2D9B3AFBA5CA\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:jre:10.0.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"1EBB11AD-EA72-4C15-945E-D335A1BF0979\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:jrockit:r28.3.18:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"69344E69-AD89-4E0F-8F35-A207BE2FD23C\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"DEECE5FC-CACF-4496-A3E7-164736409252\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:esm:*:*:*\",\"matchCriteriaId\":\"815D70A8-47D3-459C-A32C-9FEACA0659D1\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:esm:*:*:*\",\"matchCriteriaId\":\"7A5301BF-1402-4BE0-A0F8-69FBE79BC6D6\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*\",\"matchCriteriaId\":\"23A7C53F-B80F-4E6A-AFA9-58EEA84BE11D\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:hp:xp7_command_view:*:*:*:*:advanced:*:*:*\",\"matchCriteriaId\":\"87D4ED85-90F6-47E6-BF08-3595DB22C7B1\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:redhat:satellite:5.6:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"D4840254-CC76-4113-BC61-360BD15582B9\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:redhat:satellite:5.7:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"85EA16E0-9261-45C4-840F-5366E9EAC5E1\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:redhat:satellite:5.8:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F4F86C3C-B99C-44C6-97D7-163DC3F59687\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"33C068A4-3780-4EAB-A937-6082DF847564\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux_eus:7.5:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"0CF73560-2F5B-4723-A8A1-9AADBB3ADA00\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux_eus:7.6:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"5BF3C7A5-9117-42C7-BEA1-4AA378A582EF\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux_eus:7.7:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"83737173-E12E-4641-BC49-0BD84A6B29D0\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"9BBCD86A-E6C7-4444-9D74-F861084090F0\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"51EF4996-72F4-4FA4-814F-F5991E7A8318\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"B353CE99-D57C-465B-AAB0-73EF581127D1\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux_server_aus:7.7:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"7431ABC1-9252-419E-8CC1-311B41360078\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"B76AA310-FEC7-497F-AF04-C3EC1E76C4CC\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux_server_tus:7.7:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"17F256A9-D3B9-4C72-B013-4EFD878BFEA8\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E5ED5807-55B7-47C5-97A6-03233F4FBC3A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"825ECE2D-E232-46E0-A047-074B34DB1E97\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:vmware_vsphere:*:*\",\"matchCriteriaId\":\"3A756737-1CC4-42C2-A4DF-E1C893B4E2D5\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:windows:*:*\",\"matchCriteriaId\":\"B55E8D50-99B4-47EC-86F9-699B67D473CE\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:netapp:cloud_backup:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"5C2089EE-5D7F-47EC-8EA5-0F69790564C4\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:netapp:e-series_santricity_os_controller:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"11.0\",\"versionEndIncluding\":\"11.70.1\",\"matchCriteriaId\":\"73F81EC3-4AB0-4CD7-B845-267C5974DE98\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:netapp:e-series_santricity_storage_manager:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"0D9CC59D-6182-4B5E-96B5-226FCD343916\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:netapp:oncommand_insight:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F1BE6C1F-2565-4E97-92AA-16563E5660A5\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:netapp:oncommand_unified_manager:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"C18CA4B5-28FD-4199-B1F0-B1E59E920370\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:netapp:oncommand_workflow_automation:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"5735E553-9731-4AAC-BCFF-989377F817B3\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:netapp:plug-in_for_symantec_netbackup:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"FFE0A9D2-9A49-4BF6-BC6F-8249162D8334\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:netapp:snapmanager:-:*:*:*:*:oracle:*:*\",\"matchCriteriaId\":\"26A2B713-7D6D-420A-93A4-E0D983C983DF\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:netapp:snapmanager:-:*:*:*:*:sap:*:*\",\"matchCriteriaId\":\"64DE38C8-94F1-4860-B045-F33928F676A8\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:netapp:steelstore_cloud_integrated_storage:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E94F7F59-1785-493F-91A7-5F5EA5E87E4D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:netapp:storage_replication_adapter_for_clustered_data_ontap:*:*:*:*:*:vmware_vsphere:*:*\",\"versionStartIncluding\":\"9.7\",\"matchCriteriaId\":\"9DBEE506-E864-4FC6-B5D3-7E134438592C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:netapp:vasa_provider_for_clustered_data_ontap:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"9.7\",\"matchCriteriaId\":\"5E73AC99-34AC-4D4B-A946-34F33AAEC4A1\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:netapp:virtual_storage_console:*:*:*:*:*:vmware_vsphere:*:*\",\"versionStartIncluding\":\"9.7\",\"matchCriteriaId\":\"D4BE7695-11DB-4F04-A469-91A29A83B358\"}]}]}],\"references\":[{\"url\":\"http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html\",\"source\":\"secalert_us@oracle.com\",\"tags\":[\"Patch\",\"Vendor Advisory\"]},{\"url\":\"http://www.securityfocus.com/bid/104765\",\"source\":\"secalert_us@oracle.com\",\"tags\":[\"Broken Link\"]},{\"url\":\"http://www.securitytracker.com/id/1041302\",\"source\":\"secalert_us@oracle.com\",\"tags\":[\"Broken Link\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2018:2241\",\"source\":\"secalert_us@oracle.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2018:2242\",\"source\":\"secalert_us@oracle.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2018:2253\",\"source\":\"secalert_us@oracle.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2018:2254\",\"source\":\"secalert_us@oracle.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2018:2255\",\"source\":\"secalert_us@oracle.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2018:2256\",\"source\":\"secalert_us@oracle.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2018:2283\",\"source\":\"secalert_us@oracle.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2018:2286\",\"source\":\"secalert_us@oracle.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2018:2568\",\"source\":\"secalert_us@oracle.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2018:2569\",\"source\":\"secalert_us@oracle.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2018:2575\",\"source\":\"secalert_us@oracle.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2018:2576\",\"source\":\"secalert_us@oracle.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2018:2712\",\"source\":\"secalert_us@oracle.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2018:2713\",\"source\":\"secalert_us@oracle.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2018:3007\",\"source\":\"secalert_us@oracle.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2018:3008\",\"source\":\"secalert_us@oracle.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://lists.debian.org/debian-lts-announce/2018/11/msg00026.html\",\"source\":\"secalert_us@oracle.com\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"https://security.netapp.com/advisory/ntap-20180726-0001/\",\"source\":\"secalert_us@oracle.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbst03882en_us\",\"source\":\"secalert_us@oracle.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbst03928en_us\",\"source\":\"secalert_us@oracle.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://usn.ubuntu.com/3734-1/\",\"source\":\"secalert_us@oracle.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://usn.ubuntu.com/3735-1/\",\"source\":\"secalert_us@oracle.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://usn.ubuntu.com/3747-1/\",\"source\":\"secalert_us@oracle.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://www.debian.org/security/2018/dsa-4268\",\"source\":\"secalert_us@oracle.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\",\"Vendor Advisory\"]},{\"url\":\"http://www.securityfocus.com/bid/104765\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Broken Link\"]},{\"url\":\"http://www.securitytracker.com/id/1041302\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Broken Link\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2018:2241\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2018:2242\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2018:2253\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2018:2254\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2018:2255\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2018:2256\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2018:2283\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2018:2286\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2018:2568\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2018:2569\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2018:2575\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2018:2576\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2018:2712\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2018:2713\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2018:3007\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2018:3008\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://lists.debian.org/debian-lts-announce/2018/11/msg00026.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"https://security.netapp.com/advisory/ntap-20180726-0001/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbst03882en_us\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbst03928en_us\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://usn.ubuntu.com/3734-1/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://usn.ubuntu.com/3735-1/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://usn.ubuntu.com/3747-1/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://www.debian.org/security/2018/dsa-4268\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]}]}}",
"vulnrichment": {
"containers": "{\"cna\": {\"affected\": [{\"product\": \"Java\", \"vendor\": \"Oracle Corporation\", \"versions\": [{\"status\": \"affected\", \"version\": \"Java SE: 6u191\"}, {\"status\": \"affected\", \"version\": \"7u181\"}, {\"status\": \"affected\", \"version\": \"8u172\"}, {\"status\": \"affected\", \"version\": \"10.0.1; Java SE Embedded: 8u171; JRockit: R28.3.18\"}]}], \"datePublic\": \"2018-03-27T00:00:00\", \"descriptions\": [{\"lang\": \"en\", \"value\": \"Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Concurrency). Supported versions that are affected are Java SE: 6u191, 7u181, 8u172 and 10.0.1; Java SE Embedded: 8u171; JRockit: R28.3.18. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 3.7 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).\"}], \"problemTypes\": [{\"descriptions\": [{\"description\": \"Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit.\", \"lang\": \"en\", \"type\": \"text\"}]}], \"providerMetadata\": {\"dateUpdated\": \"2019-05-17T19:06:03\", \"orgId\": \"43595867-4340-4103-b7a2-9a5208d29a85\", \"shortName\": \"oracle\"}, \"references\": [{\"name\": \"RHSA-2018:2254\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"], \"url\": \"https://access.redhat.com/errata/RHSA-2018:2254\"}, {\"name\": \"[debian-lts-announce] 20181122 [SECURITY] [DLA 1590-1] openjdk-7 security update\", \"tags\": [\"mailing-list\", \"x_refsource_MLIST\"], \"url\": \"https://lists.debian.org/debian-lts-announce/2018/11/msg00026.html\"}, {\"name\": \"RHSA-2018:3007\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"], \"url\": \"https://access.redhat.com/errata/RHSA-2018:3007\"}, {\"name\": \"104765\", \"tags\": [\"vdb-entry\", \"x_refsource_BID\"], \"url\": \"http://www.securityfocus.com/bid/104765\"}, {\"tags\": [\"x_refsource_CONFIRM\"], \"url\": \"http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html\"}, {\"name\": \"RHSA-2018:2713\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"], \"url\": \"https://access.redhat.com/errata/RHSA-2018:2713\"}, {\"tags\": [\"x_refsource_CONFIRM\"], \"url\": \"https://security.netapp.com/advisory/ntap-20180726-0001/\"}, {\"name\": \"RHSA-2018:2242\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"], \"url\": \"https://access.redhat.com/errata/RHSA-2018:2242\"}, {\"name\": \"RHSA-2018:2255\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"], \"url\": \"https://access.redhat.com/errata/RHSA-2018:2255\"}, {\"name\": \"USN-3747-1\", \"tags\": [\"vendor-advisory\", \"x_refsource_UBUNTU\"], \"url\": \"https://usn.ubuntu.com/3747-1/\"}, {\"name\": \"RHSA-2018:2575\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"], \"url\": \"https://access.redhat.com/errata/RHSA-2018:2575\"}, {\"name\": \"RHSA-2018:2256\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"], \"url\": \"https://access.redhat.com/errata/RHSA-2018:2256\"}, {\"name\": \"RHSA-2018:2576\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"], \"url\": \"https://access.redhat.com/errata/RHSA-2018:2576\"}, {\"name\": \"RHSA-2018:2241\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"], \"url\": \"https://access.redhat.com/errata/RHSA-2018:2241\"}, {\"name\": \"RHSA-2018:2253\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"], \"url\": \"https://access.redhat.com/errata/RHSA-2018:2253\"}, {\"name\": \"RHSA-2018:2568\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"], \"url\": \"https://access.redhat.com/errata/RHSA-2018:2568\"}, {\"name\": \"RHSA-2018:2569\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"], \"url\": \"https://access.redhat.com/errata/RHSA-2018:2569\"}, {\"name\": \"USN-3735-1\", \"tags\": [\"vendor-advisory\", \"x_refsource_UBUNTU\"], \"url\": \"https://usn.ubuntu.com/3735-1/\"}, {\"name\": \"RHSA-2018:2712\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"], \"url\": \"https://access.redhat.com/errata/RHSA-2018:2712\"}, {\"name\": \"RHSA-2018:3008\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"], \"url\": \"https://access.redhat.com/errata/RHSA-2018:3008\"}, {\"name\": \"RHSA-2018:2286\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"], \"url\": \"https://access.redhat.com/errata/RHSA-2018:2286\"}, {\"name\": \"DSA-4268\", \"tags\": [\"vendor-advisory\", \"x_refsource_DEBIAN\"], \"url\": \"https://www.debian.org/security/2018/dsa-4268\"}, {\"name\": \"RHSA-2018:2283\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"], \"url\": \"https://access.redhat.com/errata/RHSA-2018:2283\"}, {\"name\": \"1041302\", \"tags\": [\"vdb-entry\", \"x_refsource_SECTRACK\"], \"url\": \"http://www.securitytracker.com/id/1041302\"}, {\"tags\": [\"x_refsource_CONFIRM\"], \"url\": \"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbst03882en_us\"}, {\"name\": \"USN-3734-1\", \"tags\": [\"vendor-advisory\", \"x_refsource_UBUNTU\"], \"url\": \"https://usn.ubuntu.com/3734-1/\"}, {\"tags\": [\"x_refsource_CONFIRM\"], \"url\": \"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbst03928en_us\"}], \"x_legacyV4Record\": {\"CVE_data_meta\": {\"ASSIGNER\": \"secalert_us@oracle.com\", \"ID\": \"CVE-2018-2952\", \"STATE\": \"PUBLIC\"}, \"affects\": {\"vendor\": {\"vendor_data\": [{\"product\": {\"product_data\": [{\"product_name\": \"Java\", \"version\": {\"version_data\": [{\"version_affected\": \"=\", \"version_value\": \"Java SE: 6u191\"}, {\"version_affected\": \"=\", \"version_value\": \"7u181\"}, {\"version_affected\": \"=\", \"version_value\": \"8u172\"}, {\"version_affected\": \"=\", \"version_value\": \"10.0.1; Java SE Embedded: 8u171; JRockit: R28.3.18\"}]}}]}, \"vendor_name\": \"Oracle Corporation\"}]}}, \"data_format\": \"MITRE\", \"data_type\": \"CVE\", \"data_version\": \"4.0\", \"description\": {\"description_data\": [{\"lang\": \"eng\", \"value\": \"Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Concurrency). Supported versions that are affected are Java SE: 6u191, 7u181, 8u172 and 10.0.1; Java SE Embedded: 8u171; JRockit: R28.3.18. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 3.7 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).\"}]}, \"problemtype\": {\"problemtype_data\": [{\"description\": [{\"lang\": \"eng\", \"value\": \"Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit.\"}]}]}, \"references\": {\"reference_data\": [{\"name\": \"RHSA-2018:2254\", \"refsource\": \"REDHAT\", \"url\": \"https://access.redhat.com/errata/RHSA-2018:2254\"}, {\"name\": \"[debian-lts-announce] 20181122 [SECURITY] [DLA 1590-1] openjdk-7 security update\", \"refsource\": \"MLIST\", \"url\": \"https://lists.debian.org/debian-lts-announce/2018/11/msg00026.html\"}, {\"name\": \"RHSA-2018:3007\", \"refsource\": \"REDHAT\", \"url\": \"https://access.redhat.com/errata/RHSA-2018:3007\"}, {\"name\": \"104765\", \"refsource\": \"BID\", \"url\": \"http://www.securityfocus.com/bid/104765\"}, {\"name\": \"http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html\", \"refsource\": \"CONFIRM\", \"url\": \"http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html\"}, {\"name\": \"RHSA-2018:2713\", \"refsource\": \"REDHAT\", \"url\": \"https://access.redhat.com/errata/RHSA-2018:2713\"}, {\"name\": \"https://security.netapp.com/advisory/ntap-20180726-0001/\", \"refsource\": \"CONFIRM\", \"url\": \"https://security.netapp.com/advisory/ntap-20180726-0001/\"}, {\"name\": \"RHSA-2018:2242\", \"refsource\": \"REDHAT\", \"url\": \"https://access.redhat.com/errata/RHSA-2018:2242\"}, {\"name\": \"RHSA-2018:2255\", \"refsource\": \"REDHAT\", \"url\": \"https://access.redhat.com/errata/RHSA-2018:2255\"}, {\"name\": \"USN-3747-1\", \"refsource\": \"UBUNTU\", \"url\": \"https://usn.ubuntu.com/3747-1/\"}, {\"name\": \"RHSA-2018:2575\", \"refsource\": \"REDHAT\", \"url\": \"https://access.redhat.com/errata/RHSA-2018:2575\"}, {\"name\": \"RHSA-2018:2256\", \"refsource\": \"REDHAT\", \"url\": \"https://access.redhat.com/errata/RHSA-2018:2256\"}, {\"name\": \"RHSA-2018:2576\", \"refsource\": \"REDHAT\", \"url\": \"https://access.redhat.com/errata/RHSA-2018:2576\"}, {\"name\": \"RHSA-2018:2241\", \"refsource\": \"REDHAT\", \"url\": \"https://access.redhat.com/errata/RHSA-2018:2241\"}, {\"name\": \"RHSA-2018:2253\", \"refsource\": \"REDHAT\", \"url\": \"https://access.redhat.com/errata/RHSA-2018:2253\"}, {\"name\": \"RHSA-2018:2568\", \"refsource\": \"REDHAT\", \"url\": \"https://access.redhat.com/errata/RHSA-2018:2568\"}, {\"name\": \"RHSA-2018:2569\", \"refsource\": \"REDHAT\", \"url\": \"https://access.redhat.com/errata/RHSA-2018:2569\"}, {\"name\": \"USN-3735-1\", \"refsource\": \"UBUNTU\", \"url\": \"https://usn.ubuntu.com/3735-1/\"}, {\"name\": \"RHSA-2018:2712\", \"refsource\": \"REDHAT\", \"url\": \"https://access.redhat.com/errata/RHSA-2018:2712\"}, {\"name\": \"RHSA-2018:3008\", \"refsource\": \"REDHAT\", \"url\": \"https://access.redhat.com/errata/RHSA-2018:3008\"}, {\"name\": \"RHSA-2018:2286\", \"refsource\": \"REDHAT\", \"url\": \"https://access.redhat.com/errata/RHSA-2018:2286\"}, {\"name\": \"DSA-4268\", \"refsource\": \"DEBIAN\", \"url\": \"https://www.debian.org/security/2018/dsa-4268\"}, {\"name\": \"RHSA-2018:2283\", \"refsource\": \"REDHAT\", \"url\": \"https://access.redhat.com/errata/RHSA-2018:2283\"}, {\"name\": \"1041302\", \"refsource\": \"SECTRACK\", \"url\": \"http://www.securitytracker.com/id/1041302\"}, {\"name\": \"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbst03882en_us\", \"refsource\": \"CONFIRM\", \"url\": \"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbst03882en_us\"}, {\"name\": \"USN-3734-1\", \"refsource\": \"UBUNTU\", \"url\": \"https://usn.ubuntu.com/3734-1/\"}, {\"name\": \"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbst03928en_us\", \"refsource\": \"CONFIRM\", \"url\": \"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbst03928en_us\"}]}}}, \"adp\": [{\"providerMetadata\": {\"orgId\": \"af854a3a-2127-422b-91ae-364da2661108\", \"shortName\": \"CVE\", \"dateUpdated\": \"2024-08-05T04:36:39.027Z\"}, \"title\": \"CVE Program Container\", \"references\": [{\"name\": \"RHSA-2018:2254\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\", \"x_transferred\"], \"url\": \"https://access.redhat.com/errata/RHSA-2018:2254\"}, {\"name\": \"[debian-lts-announce] 20181122 [SECURITY] [DLA 1590-1] openjdk-7 security update\", \"tags\": [\"mailing-list\", \"x_refsource_MLIST\", \"x_transferred\"], \"url\": \"https://lists.debian.org/debian-lts-announce/2018/11/msg00026.html\"}, {\"name\": \"RHSA-2018:3007\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\", \"x_transferred\"], \"url\": \"https://access.redhat.com/errata/RHSA-2018:3007\"}, {\"name\": \"104765\", \"tags\": [\"vdb-entry\", \"x_refsource_BID\", \"x_transferred\"], \"url\": \"http://www.securityfocus.com/bid/104765\"}, {\"tags\": [\"x_refsource_CONFIRM\", \"x_transferred\"], \"url\": \"http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html\"}, {\"name\": \"RHSA-2018:2713\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\", \"x_transferred\"], \"url\": \"https://access.redhat.com/errata/RHSA-2018:2713\"}, {\"tags\": [\"x_refsource_CONFIRM\", \"x_transferred\"], \"url\": \"https://security.netapp.com/advisory/ntap-20180726-0001/\"}, {\"name\": \"RHSA-2018:2242\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\", \"x_transferred\"], \"url\": \"https://access.redhat.com/errata/RHSA-2018:2242\"}, {\"name\": \"RHSA-2018:2255\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\", \"x_transferred\"], \"url\": \"https://access.redhat.com/errata/RHSA-2018:2255\"}, {\"name\": \"USN-3747-1\", \"tags\": [\"vendor-advisory\", \"x_refsource_UBUNTU\", \"x_transferred\"], \"url\": \"https://usn.ubuntu.com/3747-1/\"}, {\"name\": \"RHSA-2018:2575\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\", \"x_transferred\"], \"url\": \"https://access.redhat.com/errata/RHSA-2018:2575\"}, {\"name\": \"RHSA-2018:2256\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\", \"x_transferred\"], \"url\": \"https://access.redhat.com/errata/RHSA-2018:2256\"}, {\"name\": \"RHSA-2018:2576\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\", \"x_transferred\"], \"url\": \"https://access.redhat.com/errata/RHSA-2018:2576\"}, {\"name\": \"RHSA-2018:2241\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\", \"x_transferred\"], \"url\": \"https://access.redhat.com/errata/RHSA-2018:2241\"}, {\"name\": \"RHSA-2018:2253\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\", \"x_transferred\"], \"url\": \"https://access.redhat.com/errata/RHSA-2018:2253\"}, {\"name\": \"RHSA-2018:2568\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\", \"x_transferred\"], \"url\": \"https://access.redhat.com/errata/RHSA-2018:2568\"}, {\"name\": \"RHSA-2018:2569\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\", \"x_transferred\"], \"url\": \"https://access.redhat.com/errata/RHSA-2018:2569\"}, {\"name\": \"USN-3735-1\", \"tags\": [\"vendor-advisory\", \"x_refsource_UBUNTU\", \"x_transferred\"], \"url\": \"https://usn.ubuntu.com/3735-1/\"}, {\"name\": \"RHSA-2018:2712\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\", \"x_transferred\"], \"url\": \"https://access.redhat.com/errata/RHSA-2018:2712\"}, {\"name\": \"RHSA-2018:3008\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\", \"x_transferred\"], \"url\": \"https://access.redhat.com/errata/RHSA-2018:3008\"}, {\"name\": \"RHSA-2018:2286\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\", \"x_transferred\"], \"url\": \"https://access.redhat.com/errata/RHSA-2018:2286\"}, {\"name\": \"DSA-4268\", \"tags\": [\"vendor-advisory\", \"x_refsource_DEBIAN\", \"x_transferred\"], \"url\": \"https://www.debian.org/security/2018/dsa-4268\"}, {\"name\": \"RHSA-2018:2283\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\", \"x_transferred\"], \"url\": \"https://access.redhat.com/errata/RHSA-2018:2283\"}, {\"name\": \"1041302\", \"tags\": [\"vdb-entry\", \"x_refsource_SECTRACK\", \"x_transferred\"], \"url\": \"http://www.securitytracker.com/id/1041302\"}, {\"tags\": [\"x_refsource_CONFIRM\", \"x_transferred\"], \"url\": \"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbst03882en_us\"}, {\"name\": \"USN-3734-1\", \"tags\": [\"vendor-advisory\", \"x_refsource_UBUNTU\", \"x_transferred\"], \"url\": \"https://usn.ubuntu.com/3734-1/\"}, {\"tags\": [\"x_refsource_CONFIRM\", \"x_transferred\"], \"url\": \"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbst03928en_us\"}]}, {\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2018-2952\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"partial\"}], \"version\": \"2.0.3\", \"timestamp\": \"2024-10-02T18:11:07.777376Z\"}}}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2024-10-02T18:11:29.391Z\"}}]}",
"cveMetadata": "{\"assignerOrgId\": \"43595867-4340-4103-b7a2-9a5208d29a85\", \"assignerShortName\": \"oracle\", \"cveId\": \"CVE-2018-2952\", \"datePublished\": \"2018-07-18T13:00:00\", \"dateReserved\": \"2017-12-15T00:00:00\", \"dateUpdated\": \"2024-10-02T20:14:51.292Z\", \"state\": \"PUBLISHED\"}",
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
}
}
rhsa-2018:2575
Vulnerability from csaf_redhat
Published
2018-08-28 19:19
Modified
2025-08-04 11:58
Summary
Red Hat Security Advisory: java-1.8.0-ibm security update
Notes
Topic
An update for java-1.8.0-ibm is now available for Red Hat Enterprise Linux 6 Supplementary.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
IBM Java SE version 8 includes the IBM Java Runtime Environment and the IBM Java Software Development Kit.
This update upgrades IBM Java SE 8 to version 8 SR5-FP20.
Security Fix(es):
* IBM JDK: privilege escalation via insufficiently restricted access to Attach API (CVE-2018-12539)
* openssl: BN_mod_exp may produce incorrect results on x86_64 (CVE-2017-3732)
* openssl: bn_sqrx8x_internal carry bug on x86_64 (CVE-2017-3736)
* IBM JDK: DoS in the java.math component (CVE-2018-1517)
* IBM JDK: path traversal flaw in the Diagnostic Tooling Framework (CVE-2018-1656)
* Oracle JDK: unspecified vulnerability fixed in 6u201, 7u191, 8u181, and 10.0.2 (Libraries) (CVE-2018-2940)
* OpenJDK: insufficient index validation in PatternSyntaxException getMessage() (Concurrency, 8199547) (CVE-2018-2952)
* Oracle JDK: unspecified vulnerability fixed in 6u201, 7u191, 8u181, and 10.0.2 (JSSE) (CVE-2018-2973)
* OpenSSL: Double-free in DSA code (CVE-2016-0705)
For more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section.
Red Hat would like to thank the OpenSSL project for reporting CVE-2016-0705. Upstream acknowledges Adam Langley (Google/BoringSSL) as the original reporter of CVE-2016-0705.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for java-1.8.0-ibm is now available for Red Hat Enterprise Linux 6 Supplementary.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "IBM Java SE version 8 includes the IBM Java Runtime Environment and the IBM Java Software Development Kit.\n\nThis update upgrades IBM Java SE 8 to version 8 SR5-FP20.\n\nSecurity Fix(es):\n\n* IBM JDK: privilege escalation via insufficiently restricted access to Attach API (CVE-2018-12539)\n\n* openssl: BN_mod_exp may produce incorrect results on x86_64 (CVE-2017-3732)\n\n* openssl: bn_sqrx8x_internal carry bug on x86_64 (CVE-2017-3736)\n\n* IBM JDK: DoS in the java.math component (CVE-2018-1517)\n\n* IBM JDK: path traversal flaw in the Diagnostic Tooling Framework (CVE-2018-1656)\n\n* Oracle JDK: unspecified vulnerability fixed in 6u201, 7u191, 8u181, and 10.0.2 (Libraries) (CVE-2018-2940)\n\n* OpenJDK: insufficient index validation in PatternSyntaxException getMessage() (Concurrency, 8199547) (CVE-2018-2952)\n\n* Oracle JDK: unspecified vulnerability fixed in 6u201, 7u191, 8u181, and 10.0.2 (JSSE) (CVE-2018-2973)\n\n* OpenSSL: Double-free in DSA code (CVE-2016-0705)\n\nFor more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section.\n\nRed Hat would like to thank the OpenSSL project for reporting CVE-2016-0705. Upstream acknowledges Adam Langley (Google/BoringSSL) as the original reporter of CVE-2016-0705.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2018:2575",
"url": "https://access.redhat.com/errata/RHSA-2018:2575"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "1310596",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1310596"
},
{
"category": "external",
"summary": "1416856",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1416856"
},
{
"category": "external",
"summary": "1509169",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1509169"
},
{
"category": "external",
"summary": "1600925",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1600925"
},
{
"category": "external",
"summary": "1602145",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1602145"
},
{
"category": "external",
"summary": "1602146",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1602146"
},
{
"category": "external",
"summary": "1618767",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1618767"
},
{
"category": "external",
"summary": "1618869",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1618869"
},
{
"category": "external",
"summary": "1618871",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1618871"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_2575.json"
}
],
"title": "Red Hat Security Advisory: java-1.8.0-ibm security update",
"tracking": {
"current_release_date": "2025-08-04T11:58:40+00:00",
"generator": {
"date": "2025-08-04T11:58:40+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.6.6"
}
},
"id": "RHSA-2018:2575",
"initial_release_date": "2018-08-28T19:19:26+00:00",
"revision_history": [
{
"date": "2018-08-28T19:19:26+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2018-08-28T19:19:26+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2025-08-04T11:58:40+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
"product": {
"name": "Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
"product_id": "6Client-Supplementary-6.10.z",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras:6"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux HPC Node Supplementary (v. 6)",
"product": {
"name": "Red Hat Enterprise Linux HPC Node Supplementary (v. 6)",
"product_id": "6ComputeNode-Supplementary-6.10.z",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras:6"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Server Supplementary (v. 6)",
"product": {
"name": "Red Hat Enterprise Linux Server Supplementary (v. 6)",
"product_id": "6Server-Supplementary-6.10.z",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras:6"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
"product": {
"name": "Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
"product_id": "6Workstation-Supplementary-6.10.z",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras:6"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux Supplementary"
},
{
"branches": [
{
"category": "product_version",
"name": "java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"product": {
"name": "java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"product_id": "java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-ibm-plugin@1.8.0.5.20-1jpp.1.el6_10?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"product": {
"name": "java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"product_id": "java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-ibm-demo@1.8.0.5.20-1jpp.1.el6_10?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"product": {
"name": "java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"product_id": "java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-ibm@1.8.0.5.20-1jpp.1.el6_10?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"product": {
"name": "java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"product_id": "java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-ibm-src@1.8.0.5.20-1jpp.1.el6_10?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"product": {
"name": "java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"product_id": "java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-ibm-devel@1.8.0.5.20-1jpp.1.el6_10?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"product": {
"name": "java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"product_id": "java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-ibm-jdbc@1.8.0.5.20-1jpp.1.el6_10?arch=x86_64\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"product": {
"name": "java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"product_id": "java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-ibm-plugin@1.8.0.5.20-1jpp.1.el6_10?arch=i686\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"product": {
"name": "java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"product_id": "java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-ibm-demo@1.8.0.5.20-1jpp.1.el6_10?arch=i686\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"product": {
"name": "java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"product_id": "java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-ibm@1.8.0.5.20-1jpp.1.el6_10?arch=i686\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"product": {
"name": "java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"product_id": "java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-ibm-src@1.8.0.5.20-1jpp.1.el6_10?arch=i686\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"product": {
"name": "java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"product_id": "java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-ibm-devel@1.8.0.5.20-1jpp.1.el6_10?arch=i686\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"product": {
"name": "java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"product_id": "java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-ibm-jdbc@1.8.0.5.20-1jpp.1.el6_10?arch=i686\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "i686"
},
{
"branches": [
{
"category": "product_version",
"name": "java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"product": {
"name": "java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"product_id": "java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-ibm-demo@1.8.0.5.20-1jpp.1.el6_10?arch=s390x\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"product": {
"name": "java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"product_id": "java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-ibm@1.8.0.5.20-1jpp.1.el6_10?arch=s390x\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"product": {
"name": "java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"product_id": "java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-ibm-src@1.8.0.5.20-1jpp.1.el6_10?arch=s390x\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"product": {
"name": "java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"product_id": "java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-ibm-devel@1.8.0.5.20-1jpp.1.el6_10?arch=s390x\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"product": {
"name": "java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"product_id": "java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-ibm-jdbc@1.8.0.5.20-1jpp.1.el6_10?arch=s390x\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"product": {
"name": "java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"product_id": "java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-ibm-demo@1.8.0.5.20-1jpp.1.el6_10?arch=ppc64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"product": {
"name": "java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"product_id": "java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-ibm@1.8.0.5.20-1jpp.1.el6_10?arch=ppc64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"product": {
"name": "java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"product_id": "java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-ibm-src@1.8.0.5.20-1jpp.1.el6_10?arch=ppc64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"product": {
"name": "java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"product_id": "java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-ibm-devel@1.8.0.5.20-1jpp.1.el6_10?arch=ppc64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"product": {
"name": "java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"product_id": "java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-ibm-jdbc@1.8.0.5.20-1jpp.1.el6_10?arch=ppc64\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "ppc64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
"product_id": "6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.i686"
},
"product_reference": "java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"relates_to_product_reference": "6Client-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.ppc64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
"product_id": "6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.ppc64"
},
"product_reference": "java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"relates_to_product_reference": "6Client-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
"product_id": "6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x"
},
"product_reference": "java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"relates_to_product_reference": "6Client-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
"product_id": "6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64"
},
"product_reference": "java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"relates_to_product_reference": "6Client-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
"product_id": "6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.i686"
},
"product_reference": "java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"relates_to_product_reference": "6Client-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.ppc64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
"product_id": "6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.ppc64"
},
"product_reference": "java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"relates_to_product_reference": "6Client-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.s390x as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
"product_id": "6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.s390x"
},
"product_reference": "java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"relates_to_product_reference": "6Client-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
"product_id": "6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.x86_64"
},
"product_reference": "java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"relates_to_product_reference": "6Client-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
"product_id": "6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.i686"
},
"product_reference": "java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"relates_to_product_reference": "6Client-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.ppc64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
"product_id": "6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.ppc64"
},
"product_reference": "java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"relates_to_product_reference": "6Client-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
"product_id": "6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x"
},
"product_reference": "java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"relates_to_product_reference": "6Client-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
"product_id": "6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64"
},
"product_reference": "java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"relates_to_product_reference": "6Client-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
"product_id": "6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.i686"
},
"product_reference": "java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"relates_to_product_reference": "6Client-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.ppc64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
"product_id": "6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.ppc64"
},
"product_reference": "java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"relates_to_product_reference": "6Client-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.s390x as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
"product_id": "6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.s390x"
},
"product_reference": "java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"relates_to_product_reference": "6Client-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
"product_id": "6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.x86_64"
},
"product_reference": "java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"relates_to_product_reference": "6Client-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
"product_id": "6Client-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.i686"
},
"product_reference": "java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"relates_to_product_reference": "6Client-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
"product_id": "6Client-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.x86_64"
},
"product_reference": "java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"relates_to_product_reference": "6Client-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
"product_id": "6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.i686"
},
"product_reference": "java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"relates_to_product_reference": "6Client-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.ppc64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
"product_id": "6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.ppc64"
},
"product_reference": "java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"relates_to_product_reference": "6Client-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.s390x as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
"product_id": "6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.s390x"
},
"product_reference": "java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"relates_to_product_reference": "6Client-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
"product_id": "6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.x86_64"
},
"product_reference": "java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"relates_to_product_reference": "6Client-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.i686 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)",
"product_id": "6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.i686"
},
"product_reference": "java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"relates_to_product_reference": "6ComputeNode-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.ppc64 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)",
"product_id": "6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.ppc64"
},
"product_reference": "java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"relates_to_product_reference": "6ComputeNode-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)",
"product_id": "6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x"
},
"product_reference": "java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"relates_to_product_reference": "6ComputeNode-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)",
"product_id": "6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64"
},
"product_reference": "java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"relates_to_product_reference": "6ComputeNode-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.i686 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)",
"product_id": "6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.i686"
},
"product_reference": "java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"relates_to_product_reference": "6ComputeNode-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.ppc64 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)",
"product_id": "6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.ppc64"
},
"product_reference": "java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"relates_to_product_reference": "6ComputeNode-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.s390x as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)",
"product_id": "6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.s390x"
},
"product_reference": "java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"relates_to_product_reference": "6ComputeNode-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.x86_64 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)",
"product_id": "6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.x86_64"
},
"product_reference": "java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"relates_to_product_reference": "6ComputeNode-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.i686 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)",
"product_id": "6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.i686"
},
"product_reference": "java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"relates_to_product_reference": "6ComputeNode-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.ppc64 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)",
"product_id": "6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.ppc64"
},
"product_reference": "java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"relates_to_product_reference": "6ComputeNode-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)",
"product_id": "6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x"
},
"product_reference": "java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"relates_to_product_reference": "6ComputeNode-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)",
"product_id": "6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64"
},
"product_reference": "java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"relates_to_product_reference": "6ComputeNode-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.i686 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)",
"product_id": "6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.i686"
},
"product_reference": "java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"relates_to_product_reference": "6ComputeNode-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.ppc64 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)",
"product_id": "6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.ppc64"
},
"product_reference": "java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"relates_to_product_reference": "6ComputeNode-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.s390x as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)",
"product_id": "6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.s390x"
},
"product_reference": "java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"relates_to_product_reference": "6ComputeNode-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.x86_64 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)",
"product_id": "6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.x86_64"
},
"product_reference": "java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"relates_to_product_reference": "6ComputeNode-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.i686 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)",
"product_id": "6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.i686"
},
"product_reference": "java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"relates_to_product_reference": "6ComputeNode-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.x86_64 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)",
"product_id": "6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.x86_64"
},
"product_reference": "java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"relates_to_product_reference": "6ComputeNode-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.i686 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)",
"product_id": "6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.i686"
},
"product_reference": "java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"relates_to_product_reference": "6ComputeNode-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.ppc64 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)",
"product_id": "6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.ppc64"
},
"product_reference": "java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"relates_to_product_reference": "6ComputeNode-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.s390x as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)",
"product_id": "6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.s390x"
},
"product_reference": "java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"relates_to_product_reference": "6ComputeNode-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.x86_64 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)",
"product_id": "6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.x86_64"
},
"product_reference": "java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"relates_to_product_reference": "6ComputeNode-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)",
"product_id": "6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.i686"
},
"product_reference": "java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"relates_to_product_reference": "6Server-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.ppc64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)",
"product_id": "6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.ppc64"
},
"product_reference": "java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"relates_to_product_reference": "6Server-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)",
"product_id": "6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x"
},
"product_reference": "java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"relates_to_product_reference": "6Server-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)",
"product_id": "6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64"
},
"product_reference": "java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"relates_to_product_reference": "6Server-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)",
"product_id": "6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.i686"
},
"product_reference": "java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"relates_to_product_reference": "6Server-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.ppc64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)",
"product_id": "6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.ppc64"
},
"product_reference": "java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"relates_to_product_reference": "6Server-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.s390x as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)",
"product_id": "6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.s390x"
},
"product_reference": "java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"relates_to_product_reference": "6Server-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)",
"product_id": "6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.x86_64"
},
"product_reference": "java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"relates_to_product_reference": "6Server-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)",
"product_id": "6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.i686"
},
"product_reference": "java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"relates_to_product_reference": "6Server-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.ppc64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)",
"product_id": "6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.ppc64"
},
"product_reference": "java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"relates_to_product_reference": "6Server-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)",
"product_id": "6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x"
},
"product_reference": "java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"relates_to_product_reference": "6Server-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)",
"product_id": "6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64"
},
"product_reference": "java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"relates_to_product_reference": "6Server-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)",
"product_id": "6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.i686"
},
"product_reference": "java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"relates_to_product_reference": "6Server-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.ppc64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)",
"product_id": "6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.ppc64"
},
"product_reference": "java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"relates_to_product_reference": "6Server-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.s390x as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)",
"product_id": "6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.s390x"
},
"product_reference": "java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"relates_to_product_reference": "6Server-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)",
"product_id": "6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.x86_64"
},
"product_reference": "java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"relates_to_product_reference": "6Server-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)",
"product_id": "6Server-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.i686"
},
"product_reference": "java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"relates_to_product_reference": "6Server-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)",
"product_id": "6Server-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.x86_64"
},
"product_reference": "java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"relates_to_product_reference": "6Server-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)",
"product_id": "6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.i686"
},
"product_reference": "java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"relates_to_product_reference": "6Server-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.ppc64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)",
"product_id": "6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.ppc64"
},
"product_reference": "java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"relates_to_product_reference": "6Server-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.s390x as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)",
"product_id": "6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.s390x"
},
"product_reference": "java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"relates_to_product_reference": "6Server-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)",
"product_id": "6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.x86_64"
},
"product_reference": "java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"relates_to_product_reference": "6Server-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
"product_id": "6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.i686"
},
"product_reference": "java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"relates_to_product_reference": "6Workstation-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.ppc64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
"product_id": "6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.ppc64"
},
"product_reference": "java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"relates_to_product_reference": "6Workstation-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
"product_id": "6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x"
},
"product_reference": "java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"relates_to_product_reference": "6Workstation-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
"product_id": "6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64"
},
"product_reference": "java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"relates_to_product_reference": "6Workstation-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
"product_id": "6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.i686"
},
"product_reference": "java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"relates_to_product_reference": "6Workstation-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.ppc64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
"product_id": "6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.ppc64"
},
"product_reference": "java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"relates_to_product_reference": "6Workstation-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.s390x as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
"product_id": "6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.s390x"
},
"product_reference": "java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"relates_to_product_reference": "6Workstation-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
"product_id": "6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.x86_64"
},
"product_reference": "java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"relates_to_product_reference": "6Workstation-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
"product_id": "6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.i686"
},
"product_reference": "java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"relates_to_product_reference": "6Workstation-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.ppc64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
"product_id": "6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.ppc64"
},
"product_reference": "java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"relates_to_product_reference": "6Workstation-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
"product_id": "6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x"
},
"product_reference": "java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"relates_to_product_reference": "6Workstation-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
"product_id": "6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64"
},
"product_reference": "java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"relates_to_product_reference": "6Workstation-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
"product_id": "6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.i686"
},
"product_reference": "java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"relates_to_product_reference": "6Workstation-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.ppc64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
"product_id": "6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.ppc64"
},
"product_reference": "java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"relates_to_product_reference": "6Workstation-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.s390x as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
"product_id": "6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.s390x"
},
"product_reference": "java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"relates_to_product_reference": "6Workstation-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
"product_id": "6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.x86_64"
},
"product_reference": "java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"relates_to_product_reference": "6Workstation-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
"product_id": "6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.i686"
},
"product_reference": "java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"relates_to_product_reference": "6Workstation-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
"product_id": "6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.x86_64"
},
"product_reference": "java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"relates_to_product_reference": "6Workstation-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
"product_id": "6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.i686"
},
"product_reference": "java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"relates_to_product_reference": "6Workstation-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.ppc64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
"product_id": "6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.ppc64"
},
"product_reference": "java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"relates_to_product_reference": "6Workstation-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.s390x as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
"product_id": "6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.s390x"
},
"product_reference": "java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"relates_to_product_reference": "6Workstation-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
"product_id": "6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.x86_64"
},
"product_reference": "java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"relates_to_product_reference": "6Workstation-Supplementary-6.10.z"
}
]
},
"vulnerabilities": [
{
"acknowledgments": [
{
"names": [
"the OpenSSL project"
]
},
{
"names": [
"Adam Langley"
],
"organization": "Google/BoringSSL",
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2016-0705",
"discovery_date": "2016-02-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1310596"
}
],
"notes": [
{
"category": "description",
"text": "A double-free flaw was found in the way OpenSSL parsed certain malformed DSA (Digital Signature Algorithm) private keys. An attacker could create specially crafted DSA private keys that, when processed by an application compiled against OpenSSL, could cause the application to crash.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenSSL: Double-free in DSA code",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-0705"
},
{
"category": "external",
"summary": "RHBZ#1310596",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1310596"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-0705",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-0705"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-0705",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-0705"
}
],
"release_date": "2016-02-18T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-08-28T19:19:26+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of IBM Java must be restarted for this update to take effect.",
"product_ids": [
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:2575"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "HIGH",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 2.6,
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:H/Au:N/C:N/I:N/A:P",
"version": "2.0"
},
"products": [
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "OpenSSL: Double-free in DSA code"
},
{
"cve": "CVE-2017-3732",
"discovery_date": "2017-01-26T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1416856"
}
],
"notes": [
{
"category": "description",
"text": "There is a carry propagating bug in the x86_64 Montgomery squaring procedure in OpenSSL 1.0.2 before 1.0.2k and 1.1.0 before 1.1.0d. No EC algorithms are affected. Analysis suggests that attacks against RSA and DSA as a result of this defect would be very difficult to perform and are not believed likely. Attacks against DH are considered just feasible (although very difficult) because most of the work necessary to deduce information about a private key may be performed offline. The amount of resources required for such an attack would be very significant and likely only accessible to a limited number of attackers. An attacker would additionally need online access to an unpatched system using the target private key in a scenario with persistent DH parameters and a private key that is shared between multiple clients. For example this can occur by default in OpenSSL DHE based SSL/TLS ciphersuites. Note: This issue is very similar to CVE-2015-3193 but must be treated as a separate problem.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "openssl: BN_mod_exp may produce incorrect results on x86_64",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2017-3732"
},
{
"category": "external",
"summary": "RHBZ#1416856",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1416856"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2017-3732",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-3732"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-3732",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2017-3732"
},
{
"category": "external",
"summary": "https://www.openssl.org/news/secadv/20170126.txt",
"url": "https://www.openssl.org/news/secadv/20170126.txt"
}
],
"release_date": "2017-01-26T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-08-28T19:19:26+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of IBM Java must be restarted for this update to take effect.",
"product_ids": [
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:2575"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "openssl: BN_mod_exp may produce incorrect results on x86_64"
},
{
"cve": "CVE-2017-3736",
"cwe": {
"id": "CWE-682",
"name": "Incorrect Calculation"
},
"discovery_date": "2017-11-02T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1509169"
}
],
"notes": [
{
"category": "description",
"text": "There is a carry propagating bug in the x86_64 Montgomery squaring procedure in OpenSSL before 1.0.2m and 1.1.0 before 1.1.0g. No EC algorithms are affected. Analysis suggests that attacks against RSA and DSA as a result of this defect would be very difficult to perform and are not believed likely. Attacks against DH are considered just feasible (although very difficult) because most of the work necessary to deduce information about a private key may be performed offline. The amount of resources required for such an attack would be very significant and likely only accessible to a limited number of attackers. An attacker would additionally need online access to an unpatched system using the target private key in a scenario with persistent DH parameters and a private key that is shared between multiple clients. This only affects processors that support the BMI1, BMI2 and ADX extensions like Intel Broadwell (5th generation) and later or AMD Ryzen.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "openssl: bn_sqrx8x_internal carry bug on x86_64",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2017-3736"
},
{
"category": "external",
"summary": "RHBZ#1509169",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1509169"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2017-3736",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-3736"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-3736",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2017-3736"
},
{
"category": "external",
"summary": "https://www.openssl.org/news/secadv/20171102.txt",
"url": "https://www.openssl.org/news/secadv/20171102.txt"
}
],
"release_date": "2017-11-02T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-08-28T19:19:26+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of IBM Java must be restarted for this update to take effect.",
"product_ids": [
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:2575"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "openssl: bn_sqrx8x_internal carry bug on x86_64"
},
{
"cve": "CVE-2018-1517",
"discovery_date": "2018-08-16T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1618871"
}
],
"notes": [
{
"category": "description",
"text": "A flaw in the java.math component in IBM SDK, Java Technology Edition 6.0, 7.0, and 8.0 may allow an attacker to inflict a denial-of-service attack with specially crafted String data. IBM X-Force ID: 141681.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "JDK: DoS in the java.math component",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-1517"
},
{
"category": "external",
"summary": "RHBZ#1618871",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1618871"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-1517",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-1517"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-1517",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-1517"
}
],
"release_date": "2018-08-16T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-08-28T19:19:26+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of IBM Java must be restarted for this update to take effect.",
"product_ids": [
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:2575"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "JDK: DoS in the java.math component"
},
{
"cve": "CVE-2018-1656",
"cwe": {
"id": "CWE-22",
"name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)"
},
"discovery_date": "2018-08-16T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1618869"
}
],
"notes": [
{
"category": "description",
"text": "The IBM Java Runtime Environment\u0027s Diagnostic Tooling Framework for Java (DTFJ) (IBM SDK, Java Technology Edition 6.0 , 7.0, and 8.0) does not protect against path traversal attacks when extracting compressed dump files. IBM X-Force ID: 144882.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "JDK: path traversal flaw in the Diagnostic Tooling Framework",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-1656"
},
{
"category": "external",
"summary": "RHBZ#1618869",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1618869"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-1656",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-1656"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-1656",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-1656"
}
],
"release_date": "2018-08-16T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-08-28T19:19:26+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of IBM Java must be restarted for this update to take effect.",
"product_ids": [
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:2575"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.0"
},
"products": [
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "JDK: path traversal flaw in the Diagnostic Tooling Framework"
},
{
"cve": "CVE-2018-2940",
"discovery_date": "2018-07-17T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1602146"
}
],
"notes": [
{
"category": "description",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries). Supported versions that are affected are Java SE: 6u191, 7u181, 8u172 and 10.0.1; Java SE Embedded: 8u171. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 4.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "JDK: unspecified vulnerability fixed in 6u201, 7u191, 8u181, and 10.0.2 (Libraries)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-2940"
},
{
"category": "external",
"summary": "RHBZ#1602146",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1602146"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-2940",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-2940"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2940",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2940"
},
{
"category": "external",
"summary": "http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html#AppendixJAVA",
"url": "http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html#AppendixJAVA"
}
],
"release_date": "2018-07-17T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-08-28T19:19:26+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of IBM Java must be restarted for this update to take effect.",
"product_ids": [
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:2575"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "JDK: unspecified vulnerability fixed in 6u201, 7u191, 8u181, and 10.0.2 (Libraries)"
},
{
"cve": "CVE-2018-2952",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2018-07-11T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1600925"
}
],
"notes": [
{
"category": "description",
"text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Concurrency). Supported versions that are affected are Java SE: 6u191, 7u181, 8u172 and 10.0.1; Java SE Embedded: 8u171; JRockit: R28.3.18. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 3.7 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK: insufficient index validation in PatternSyntaxException getMessage() (Concurrency, 8199547)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-2952"
},
{
"category": "external",
"summary": "RHBZ#1600925",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1600925"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-2952",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-2952"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2952",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2952"
}
],
"release_date": "2018-07-17T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-08-28T19:19:26+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of IBM Java must be restarted for this update to take effect.",
"product_ids": [
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:2575"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 3.7,
"baseSeverity": "LOW",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "OpenJDK: insufficient index validation in PatternSyntaxException getMessage() (Concurrency, 8199547)"
},
{
"cve": "CVE-2018-2973",
"discovery_date": "2018-07-17T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1602145"
}
],
"notes": [
{
"category": "description",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: JSSE). Supported versions that are affected are Java SE: 6u191, 7u181, 8u172 and 10.0.1; Java SE Embedded: 8u171. Difficult to exploit vulnerability allows unauthenticated attacker with network access via SSL/TLS to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 5.9 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "JDK: unspecified vulnerability fixed in 6u201, 7u191, 8u181, and 10.0.2 (JSSE)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-2973"
},
{
"category": "external",
"summary": "RHBZ#1602145",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1602145"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-2973",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-2973"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2973",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2973"
},
{
"category": "external",
"summary": "http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html#AppendixJAVA",
"url": "http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html#AppendixJAVA"
}
],
"release_date": "2018-07-17T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-08-28T19:19:26+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of IBM Java must be restarted for this update to take effect.",
"product_ids": [
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:2575"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.0"
},
"products": [
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "JDK: unspecified vulnerability fixed in 6u201, 7u191, 8u181, and 10.0.2 (JSSE)"
},
{
"cve": "CVE-2018-12539",
"cwe": {
"id": "CWE-287",
"name": "Improper Authentication"
},
"discovery_date": "2018-08-16T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1618767"
}
],
"notes": [
{
"category": "description",
"text": "In Eclipse OpenJ9 version 0.8, users other than the process owner may be able to use Java Attach API to connect to an Eclipse OpenJ9 or IBM JVM on the same machine and use Attach API operations, which includes the ability to execute untrusted native code. Attach API is enabled by default on Windows, Linux and AIX JVMs and can be disabled using the command line option -Dcom.ibm.tools.attach.enable=no.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "JDK: privilege escalation via insufficiently restricted access to Attach API",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-12539"
},
{
"category": "external",
"summary": "RHBZ#1618767",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1618767"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-12539",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-12539"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-12539",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-12539"
}
],
"release_date": "2018-05-11T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-08-28T19:19:26+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of IBM Java must be restarted for this update to take effect.",
"product_ids": [
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:2575"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 8.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "JDK: privilege escalation via insufficiently restricted access to Attach API"
}
]
}
rhsa-2018:3007
Vulnerability from csaf_redhat
Published
2018-10-24 21:39
Modified
2025-08-04 12:07
Summary
Red Hat Security Advisory: java-1.6.0-sun security update
Notes
Topic
An update for java-1.6.0-sun is now available for Oracle Java for Red Hat Enterprise Linux 7.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
Oracle Java SE version 6 includes the Oracle Java Runtime Environment and the Oracle Java Software Development Kit.
This update upgrades Oracle Java SE 6 to version 6 Update 211.
Security Fix(es):
* OpenJDK: Incomplete enforcement of the trustURLCodebase restriction (JNDI, 8199177) (CVE-2018-3149)
* Oracle JDK: unspecified vulnerability fixed in 6u201, 7u191, 8u181, and 10.0.2 (Libraries) (CVE-2018-2940)
* OpenJDK: insufficient index validation in PatternSyntaxException getMessage() (Concurrency, 8199547) (CVE-2018-2952)
* Oracle JDK: unspecified vulnerability fixed in 6u201, 7u191, 8u181, and 10.0.2 (JSSE) (CVE-2018-2973)
* OpenJDK: Incorrect handling of unsigned attributes in signed Jar manifests (Security, 8194534) (CVE-2018-3136)
* OpenJDK: Leak of sensitive header data via HTTP redirect (Networking, 8196902) (CVE-2018-3139)
* OpenJDK: Missing endpoint identification algorithm check during TLS session resumption (JSSE, 8202613) (CVE-2018-3180)
* OpenJDK: Infinite loop in RIFF format reader (Sound, 8205361) (CVE-2018-3214)
* libpng: Integer overflow and resultant divide-by-zero in pngrutil.c:png_check_chunk_length() allows for denial of service (CVE-2018-13785)
For more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for java-1.6.0-sun is now available for Oracle Java for Red Hat Enterprise Linux 7.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Oracle Java SE version 6 includes the Oracle Java Runtime Environment and the Oracle Java Software Development Kit.\n\nThis update upgrades Oracle Java SE 6 to version 6 Update 211.\n\nSecurity Fix(es):\n\n* OpenJDK: Incomplete enforcement of the trustURLCodebase restriction (JNDI, 8199177) (CVE-2018-3149)\n\n* Oracle JDK: unspecified vulnerability fixed in 6u201, 7u191, 8u181, and 10.0.2 (Libraries) (CVE-2018-2940)\n\n* OpenJDK: insufficient index validation in PatternSyntaxException getMessage() (Concurrency, 8199547) (CVE-2018-2952)\n\n* Oracle JDK: unspecified vulnerability fixed in 6u201, 7u191, 8u181, and 10.0.2 (JSSE) (CVE-2018-2973)\n\n* OpenJDK: Incorrect handling of unsigned attributes in signed Jar manifests (Security, 8194534) (CVE-2018-3136)\n\n* OpenJDK: Leak of sensitive header data via HTTP redirect (Networking, 8196902) (CVE-2018-3139)\n\n* OpenJDK: Missing endpoint identification algorithm check during TLS session resumption (JSSE, 8202613) (CVE-2018-3180)\n\n* OpenJDK: Infinite loop in RIFF format reader (Sound, 8205361) (CVE-2018-3214)\n\n* libpng: Integer overflow and resultant divide-by-zero in pngrutil.c:png_check_chunk_length() allows for denial of service (CVE-2018-13785)\n\nFor more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2018:3007",
"url": "https://access.redhat.com/errata/RHSA-2018:3007"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "1599943",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1599943"
},
{
"category": "external",
"summary": "1600925",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1600925"
},
{
"category": "external",
"summary": "1602145",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1602145"
},
{
"category": "external",
"summary": "1602146",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1602146"
},
{
"category": "external",
"summary": "1639301",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1639301"
},
{
"category": "external",
"summary": "1639442",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1639442"
},
{
"category": "external",
"summary": "1639484",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1639484"
},
{
"category": "external",
"summary": "1639755",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1639755"
},
{
"category": "external",
"summary": "1639834",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1639834"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_3007.json"
}
],
"title": "Red Hat Security Advisory: java-1.6.0-sun security update",
"tracking": {
"current_release_date": "2025-08-04T12:07:16+00:00",
"generator": {
"date": "2025-08-04T12:07:16+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.6.6"
}
},
"id": "RHSA-2018:3007",
"initial_release_date": "2018-10-24T21:39:41+00:00",
"revision_history": [
{
"date": "2018-10-24T21:39:41+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2018-10-24T21:39:41+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2025-08-04T12:07:16+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Oracle Java for Red Hat Enterprise Linux Client (v. 7)",
"product": {
"name": "Oracle Java for Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-OracleJava-7.5.Z",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras_oracle_java:7"
}
}
},
{
"category": "product_name",
"name": "Oracle Java for Red Hat Enterprise Linux Compute Node (v. 7)",
"product": {
"name": "Oracle Java for Red Hat Enterprise Linux Compute Node (v. 7)",
"product_id": "7ComputeNode-OracleJava-7.5.Z",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras_oracle_java:7"
}
}
},
{
"category": "product_name",
"name": "Oracle Java for Red Hat Enterprise Linux Server (v. 7)",
"product": {
"name": "Oracle Java for Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-OracleJava-7.5.Z",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras_oracle_java:7"
}
}
},
{
"category": "product_name",
"name": "Oracle Java for Red Hat Enterprise Linux Workstation (v. 7)",
"product": {
"name": "Oracle Java for Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-OracleJava-7.5.Z",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras_oracle_java:7"
}
}
}
],
"category": "product_family",
"name": "Oracle Java for Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7.x86_64",
"product": {
"name": "java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7.x86_64",
"product_id": "java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.6.0-sun@1.6.0.211-1jpp.1.el7?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el7.x86_64",
"product": {
"name": "java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el7.x86_64",
"product_id": "java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.6.0-sun-devel@1.6.0.211-1jpp.1.el7?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el7.x86_64",
"product": {
"name": "java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el7.x86_64",
"product_id": "java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.6.0-sun-plugin@1.6.0.211-1jpp.1.el7?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el7.x86_64",
"product": {
"name": "java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el7.x86_64",
"product_id": "java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.6.0-sun-src@1.6.0.211-1jpp.1.el7?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el7.x86_64",
"product": {
"name": "java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el7.x86_64",
"product_id": "java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.6.0-sun-demo@1.6.0.211-1jpp.1.el7?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el7.x86_64",
"product": {
"name": "java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el7.x86_64",
"product_id": "java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.6.0-sun-jdbc@1.6.0.211-1jpp.1.el7?arch=x86_64\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7.i686",
"product": {
"name": "java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7.i686",
"product_id": "java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.6.0-sun@1.6.0.211-1jpp.1.el7?arch=i686\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el7.i686",
"product": {
"name": "java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el7.i686",
"product_id": "java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el7.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.6.0-sun-devel@1.6.0.211-1jpp.1.el7?arch=i686\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "i686"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7.i686 as a component of Oracle Java for Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7.i686"
},
"product_reference": "java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7.i686",
"relates_to_product_reference": "7Client-OracleJava-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7.x86_64"
},
"product_reference": "java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7.x86_64",
"relates_to_product_reference": "7Client-OracleJava-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el7.x86_64"
},
"product_reference": "java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el7.x86_64",
"relates_to_product_reference": "7Client-OracleJava-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el7.i686 as a component of Oracle Java for Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el7.i686"
},
"product_reference": "java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el7.i686",
"relates_to_product_reference": "7Client-OracleJava-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el7.x86_64"
},
"product_reference": "java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el7.x86_64",
"relates_to_product_reference": "7Client-OracleJava-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el7.x86_64"
},
"product_reference": "java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el7.x86_64",
"relates_to_product_reference": "7Client-OracleJava-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el7.x86_64"
},
"product_reference": "java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el7.x86_64",
"relates_to_product_reference": "7Client-OracleJava-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el7.x86_64"
},
"product_reference": "java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el7.x86_64",
"relates_to_product_reference": "7Client-OracleJava-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7.i686 as a component of Oracle Java for Red Hat Enterprise Linux Compute Node (v. 7)",
"product_id": "7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7.i686"
},
"product_reference": "java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7.i686",
"relates_to_product_reference": "7ComputeNode-OracleJava-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Compute Node (v. 7)",
"product_id": "7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7.x86_64"
},
"product_reference": "java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7.x86_64",
"relates_to_product_reference": "7ComputeNode-OracleJava-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Compute Node (v. 7)",
"product_id": "7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el7.x86_64"
},
"product_reference": "java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el7.x86_64",
"relates_to_product_reference": "7ComputeNode-OracleJava-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el7.i686 as a component of Oracle Java for Red Hat Enterprise Linux Compute Node (v. 7)",
"product_id": "7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el7.i686"
},
"product_reference": "java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el7.i686",
"relates_to_product_reference": "7ComputeNode-OracleJava-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Compute Node (v. 7)",
"product_id": "7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el7.x86_64"
},
"product_reference": "java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el7.x86_64",
"relates_to_product_reference": "7ComputeNode-OracleJava-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Compute Node (v. 7)",
"product_id": "7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el7.x86_64"
},
"product_reference": "java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el7.x86_64",
"relates_to_product_reference": "7ComputeNode-OracleJava-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Compute Node (v. 7)",
"product_id": "7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el7.x86_64"
},
"product_reference": "java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el7.x86_64",
"relates_to_product_reference": "7ComputeNode-OracleJava-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Compute Node (v. 7)",
"product_id": "7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el7.x86_64"
},
"product_reference": "java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el7.x86_64",
"relates_to_product_reference": "7ComputeNode-OracleJava-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7.i686 as a component of Oracle Java for Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7.i686"
},
"product_reference": "java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7.i686",
"relates_to_product_reference": "7Server-OracleJava-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7.x86_64"
},
"product_reference": "java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7.x86_64",
"relates_to_product_reference": "7Server-OracleJava-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el7.x86_64"
},
"product_reference": "java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el7.x86_64",
"relates_to_product_reference": "7Server-OracleJava-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el7.i686 as a component of Oracle Java for Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el7.i686"
},
"product_reference": "java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el7.i686",
"relates_to_product_reference": "7Server-OracleJava-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el7.x86_64"
},
"product_reference": "java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el7.x86_64",
"relates_to_product_reference": "7Server-OracleJava-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el7.x86_64"
},
"product_reference": "java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el7.x86_64",
"relates_to_product_reference": "7Server-OracleJava-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el7.x86_64"
},
"product_reference": "java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el7.x86_64",
"relates_to_product_reference": "7Server-OracleJava-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el7.x86_64"
},
"product_reference": "java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el7.x86_64",
"relates_to_product_reference": "7Server-OracleJava-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7.i686 as a component of Oracle Java for Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7.i686"
},
"product_reference": "java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7.i686",
"relates_to_product_reference": "7Workstation-OracleJava-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7.x86_64"
},
"product_reference": "java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7.x86_64",
"relates_to_product_reference": "7Workstation-OracleJava-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el7.x86_64"
},
"product_reference": "java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el7.x86_64",
"relates_to_product_reference": "7Workstation-OracleJava-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el7.i686 as a component of Oracle Java for Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el7.i686"
},
"product_reference": "java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el7.i686",
"relates_to_product_reference": "7Workstation-OracleJava-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el7.x86_64"
},
"product_reference": "java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el7.x86_64",
"relates_to_product_reference": "7Workstation-OracleJava-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el7.x86_64"
},
"product_reference": "java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el7.x86_64",
"relates_to_product_reference": "7Workstation-OracleJava-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el7.x86_64"
},
"product_reference": "java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el7.x86_64",
"relates_to_product_reference": "7Workstation-OracleJava-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el7.x86_64"
},
"product_reference": "java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el7.x86_64",
"relates_to_product_reference": "7Workstation-OracleJava-7.5.Z"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2018-2940",
"discovery_date": "2018-07-17T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1602146"
}
],
"notes": [
{
"category": "description",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries). Supported versions that are affected are Java SE: 6u191, 7u181, 8u172 and 10.0.1; Java SE Embedded: 8u171. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 4.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "JDK: unspecified vulnerability fixed in 6u201, 7u191, 8u181, and 10.0.2 (Libraries)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7.i686",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el7.i686",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7.i686",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el7.i686",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7.i686",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el7.i686",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7.i686",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el7.i686",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-2940"
},
{
"category": "external",
"summary": "RHBZ#1602146",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1602146"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-2940",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-2940"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2940",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2940"
},
{
"category": "external",
"summary": "http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html#AppendixJAVA",
"url": "http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html#AppendixJAVA"
}
],
"release_date": "2018-07-17T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-10-24T21:39:41+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.",
"product_ids": [
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7.i686",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el7.i686",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7.i686",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el7.i686",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7.i686",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el7.i686",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7.i686",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el7.i686",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:3007"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7.i686",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el7.i686",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7.i686",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el7.i686",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7.i686",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el7.i686",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7.i686",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el7.i686",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "JDK: unspecified vulnerability fixed in 6u201, 7u191, 8u181, and 10.0.2 (Libraries)"
},
{
"cve": "CVE-2018-2952",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2018-07-11T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1600925"
}
],
"notes": [
{
"category": "description",
"text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Concurrency). Supported versions that are affected are Java SE: 6u191, 7u181, 8u172 and 10.0.1; Java SE Embedded: 8u171; JRockit: R28.3.18. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 3.7 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK: insufficient index validation in PatternSyntaxException getMessage() (Concurrency, 8199547)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7.i686",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el7.i686",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7.i686",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el7.i686",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7.i686",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el7.i686",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7.i686",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el7.i686",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-2952"
},
{
"category": "external",
"summary": "RHBZ#1600925",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1600925"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-2952",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-2952"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2952",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2952"
}
],
"release_date": "2018-07-17T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-10-24T21:39:41+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.",
"product_ids": [
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7.i686",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el7.i686",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7.i686",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el7.i686",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7.i686",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el7.i686",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7.i686",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el7.i686",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:3007"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 3.7,
"baseSeverity": "LOW",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7.i686",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el7.i686",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7.i686",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el7.i686",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7.i686",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el7.i686",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7.i686",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el7.i686",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "OpenJDK: insufficient index validation in PatternSyntaxException getMessage() (Concurrency, 8199547)"
},
{
"cve": "CVE-2018-2973",
"discovery_date": "2018-07-17T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1602145"
}
],
"notes": [
{
"category": "description",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: JSSE). Supported versions that are affected are Java SE: 6u191, 7u181, 8u172 and 10.0.1; Java SE Embedded: 8u171. Difficult to exploit vulnerability allows unauthenticated attacker with network access via SSL/TLS to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 5.9 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "JDK: unspecified vulnerability fixed in 6u201, 7u191, 8u181, and 10.0.2 (JSSE)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7.i686",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el7.i686",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7.i686",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el7.i686",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7.i686",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el7.i686",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7.i686",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el7.i686",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-2973"
},
{
"category": "external",
"summary": "RHBZ#1602145",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1602145"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-2973",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-2973"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2973",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2973"
},
{
"category": "external",
"summary": "http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html#AppendixJAVA",
"url": "http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html#AppendixJAVA"
}
],
"release_date": "2018-07-17T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-10-24T21:39:41+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.",
"product_ids": [
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7.i686",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el7.i686",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7.i686",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el7.i686",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7.i686",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el7.i686",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7.i686",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el7.i686",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:3007"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.0"
},
"products": [
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7.i686",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el7.i686",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7.i686",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el7.i686",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7.i686",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el7.i686",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7.i686",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el7.i686",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "JDK: unspecified vulnerability fixed in 6u201, 7u191, 8u181, and 10.0.2 (JSSE)"
},
{
"cve": "CVE-2018-3136",
"cwe": {
"id": "CWE-347",
"name": "Improper Verification of Cryptographic Signature"
},
"discovery_date": "2018-09-28T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1639755"
}
],
"notes": [
{
"category": "description",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u201, 7u191, 8u182 and 11; Java SE Embedded: 8u181. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, Java SE Embedded, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g. code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g. code installed by an administrator). CVSS 3.0 Base Score 3.4 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:L/A:N).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK: Incorrect handling of unsigned attributes in signed Jar manifests (Security, 8194534)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7.i686",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el7.i686",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7.i686",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el7.i686",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7.i686",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el7.i686",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7.i686",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el7.i686",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-3136"
},
{
"category": "external",
"summary": "RHBZ#1639755",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1639755"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-3136",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-3136"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-3136",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-3136"
}
],
"release_date": "2018-10-16T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-10-24T21:39:41+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.",
"product_ids": [
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7.i686",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el7.i686",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7.i686",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el7.i686",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7.i686",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el7.i686",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7.i686",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el7.i686",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:3007"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 3.1,
"baseSeverity": "LOW",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.0"
},
"products": [
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7.i686",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el7.i686",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7.i686",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el7.i686",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7.i686",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el7.i686",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7.i686",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el7.i686",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "OpenJDK: Incorrect handling of unsigned attributes in signed Jar manifests (Security, 8194534)"
},
{
"cve": "CVE-2018-3139",
"cwe": {
"id": "CWE-201",
"name": "Insertion of Sensitive Information Into Sent Data"
},
"discovery_date": "2018-09-28T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1639442"
}
],
"notes": [
{
"category": "description",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Networking). Supported versions that are affected are Java SE: 6u201, 7u191, 8u182 and 11; Java SE Embedded: 8u181. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g. code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g. code installed by an administrator). CVSS 3.0 Base Score 3.1 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK: Leak of sensitive header data via HTTP redirect (Networking, 8196902)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7.i686",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el7.i686",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7.i686",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el7.i686",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7.i686",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el7.i686",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7.i686",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el7.i686",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-3139"
},
{
"category": "external",
"summary": "RHBZ#1639442",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1639442"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-3139",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-3139"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-3139",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-3139"
}
],
"release_date": "2018-10-16T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-10-24T21:39:41+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.",
"product_ids": [
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7.i686",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el7.i686",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7.i686",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el7.i686",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7.i686",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el7.i686",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7.i686",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el7.i686",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:3007"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 3.1,
"baseSeverity": "LOW",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7.i686",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el7.i686",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7.i686",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el7.i686",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7.i686",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el7.i686",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7.i686",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el7.i686",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "OpenJDK: Leak of sensitive header data via HTTP redirect (Networking, 8196902)"
},
{
"cve": "CVE-2018-3149",
"cwe": {
"id": "CWE-426",
"name": "Untrusted Search Path"
},
"discovery_date": "2018-09-28T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1639834"
}
],
"notes": [
{
"category": "description",
"text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JNDI). Supported versions that are affected are Java SE: 6u201, 7u191, 8u182 and 11; Java SE Embedded: 8u181; JRockit: R28.3.19. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, Java SE Embedded, JRockit, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE, Java SE Embedded, JRockit. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g. code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g. through a web service which supplies data to the APIs. CVSS 3.0 Base Score 8.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK: Incomplete enforcement of the trustURLCodebase restriction (JNDI, 8199177)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7.i686",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el7.i686",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7.i686",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el7.i686",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7.i686",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el7.i686",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7.i686",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el7.i686",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-3149"
},
{
"category": "external",
"summary": "RHBZ#1639834",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1639834"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-3149",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-3149"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-3149",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-3149"
}
],
"release_date": "2018-10-16T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-10-24T21:39:41+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.",
"product_ids": [
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7.i686",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el7.i686",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7.i686",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el7.i686",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7.i686",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el7.i686",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7.i686",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el7.i686",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:3007"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7.i686",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el7.i686",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7.i686",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el7.i686",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7.i686",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el7.i686",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7.i686",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el7.i686",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "OpenJDK: Incomplete enforcement of the trustURLCodebase restriction (JNDI, 8199177)"
},
{
"cve": "CVE-2018-3180",
"cwe": {
"id": "CWE-295",
"name": "Improper Certificate Validation"
},
"discovery_date": "2018-09-28T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1639484"
}
],
"notes": [
{
"category": "description",
"text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JSSE). Supported versions that are affected are Java SE: 6u201, 7u191, 8u182 and 11; Java SE Embedded: 8u181; JRockit: R28.3.19. Difficult to exploit vulnerability allows unauthenticated attacker with network access via SSL/TLS to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded, JRockit accessible data as well as unauthorized read access to a subset of Java SE, Java SE Embedded, JRockit accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g. code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g. through a web service which supplies data to the APIs. CVSS 3.0 Base Score 5.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK: Missing endpoint identification algorithm check during TLS session resumption (JSSE, 8202613)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7.i686",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el7.i686",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7.i686",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el7.i686",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7.i686",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el7.i686",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7.i686",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el7.i686",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-3180"
},
{
"category": "external",
"summary": "RHBZ#1639484",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1639484"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-3180",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-3180"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-3180",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-3180"
}
],
"release_date": "2018-10-16T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-10-24T21:39:41+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.",
"product_ids": [
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7.i686",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el7.i686",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7.i686",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el7.i686",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7.i686",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el7.i686",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7.i686",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el7.i686",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:3007"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 4.8,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7.i686",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el7.i686",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7.i686",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el7.i686",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7.i686",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el7.i686",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7.i686",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el7.i686",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "OpenJDK: Missing endpoint identification algorithm check during TLS session resumption (JSSE, 8202613)"
},
{
"cve": "CVE-2018-3214",
"cwe": {
"id": "CWE-835",
"name": "Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)"
},
"discovery_date": "2018-09-28T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1639301"
}
],
"notes": [
{
"category": "description",
"text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Sound). Supported versions that are affected are Java SE: 6u201, 7u191 and 8u182; Java SE Embedded: 8u181; JRockit: R28.3.19. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g. through a web service which supplies data to the APIs. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK: Infinite loop in RIFF format reader (Sound, 8205361)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7.i686",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el7.i686",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7.i686",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el7.i686",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7.i686",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el7.i686",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7.i686",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el7.i686",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-3214"
},
{
"category": "external",
"summary": "RHBZ#1639301",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1639301"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-3214",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-3214"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-3214",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-3214"
}
],
"release_date": "2018-10-16T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-10-24T21:39:41+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.",
"product_ids": [
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7.i686",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el7.i686",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7.i686",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el7.i686",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7.i686",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el7.i686",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7.i686",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el7.i686",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:3007"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7.i686",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el7.i686",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7.i686",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el7.i686",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7.i686",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el7.i686",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7.i686",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el7.i686",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "OpenJDK: Infinite loop in RIFF format reader (Sound, 8205361)"
},
{
"cve": "CVE-2018-13785",
"cwe": {
"id": "CWE-369",
"name": "Divide By Zero"
},
"discovery_date": "2018-07-11T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1599943"
}
],
"notes": [
{
"category": "description",
"text": "In libpng 1.6.34, a wrong calculation of row_factor in the png_check_chunk_length function (pngrutil.c) may trigger an integer overflow and resultant divide-by-zero while processing a crafted PNG file, leading to a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "libpng: Integer overflow and resultant divide-by-zero in pngrutil.c:png_check_chunk_length() allows for denial of service",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7.i686",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el7.i686",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7.i686",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el7.i686",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7.i686",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el7.i686",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7.i686",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el7.i686",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-13785"
},
{
"category": "external",
"summary": "RHBZ#1599943",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1599943"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-13785",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-13785"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-13785",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-13785"
}
],
"release_date": "2018-04-05T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-10-24T21:39:41+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.",
"product_ids": [
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7.i686",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el7.i686",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7.i686",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el7.i686",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7.i686",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el7.i686",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7.i686",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el7.i686",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:3007"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7.i686",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el7.i686",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7.i686",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el7.i686",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7.i686",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el7.i686",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7.i686",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el7.i686",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "libpng: Integer overflow and resultant divide-by-zero in pngrutil.c:png_check_chunk_length() allows for denial of service"
}
]
}
rhsa-2018:2255
Vulnerability from csaf_redhat
Published
2018-07-24 21:13
Modified
2025-08-03 18:29
Summary
Red Hat Security Advisory: java-1.7.0-oracle security update
Notes
Topic
An update for java-1.7.0-oracle is now available for Oracle Java for Red Hat Enterprise Linux 6.
Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
Oracle Java SE version 7 includes the Oracle Java Runtime Environment and the Oracle Java Software Development Kit.
This update upgrades Oracle Java SE 7 to version 7 Update 191.
Security Fix(es):
* Oracle JDK: unspecified vulnerability fixed in 7u191, 8u181, and 10.0.2 (JavaFX) (CVE-2018-2941)
* Oracle JDK: unspecified vulnerability fixed in 6u201, 7u191, 8u181, and 10.0.2 (Libraries) (CVE-2018-2940)
* OpenJDK: insufficient index validation in PatternSyntaxException getMessage() (Concurrency, 8199547) (CVE-2018-2952)
* Oracle JDK: unspecified vulnerability fixed in 6u201, 7u191, 8u181, and 10.0.2 (JSSE) (CVE-2018-2973)
For more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Critical"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for java-1.7.0-oracle is now available for Oracle Java for Red Hat Enterprise Linux 6.\n\nRed Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Oracle Java SE version 7 includes the Oracle Java Runtime Environment and the Oracle Java Software Development Kit.\n\nThis update upgrades Oracle Java SE 7 to version 7 Update 191.\n\nSecurity Fix(es):\n\n* Oracle JDK: unspecified vulnerability fixed in 7u191, 8u181, and 10.0.2 (JavaFX) (CVE-2018-2941)\n\n* Oracle JDK: unspecified vulnerability fixed in 6u201, 7u191, 8u181, and 10.0.2 (Libraries) (CVE-2018-2940)\n\n* OpenJDK: insufficient index validation in PatternSyntaxException getMessage() (Concurrency, 8199547) (CVE-2018-2952)\n\n* Oracle JDK: unspecified vulnerability fixed in 6u201, 7u191, 8u181, and 10.0.2 (JSSE) (CVE-2018-2973)\n\nFor more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2018:2255",
"url": "https://access.redhat.com/errata/RHSA-2018:2255"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#critical",
"url": "https://access.redhat.com/security/updates/classification/#critical"
},
{
"category": "external",
"summary": "1600925",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1600925"
},
{
"category": "external",
"summary": "1602143",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1602143"
},
{
"category": "external",
"summary": "1602145",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1602145"
},
{
"category": "external",
"summary": "1602146",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1602146"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_2255.json"
}
],
"title": "Red Hat Security Advisory: java-1.7.0-oracle security update",
"tracking": {
"current_release_date": "2025-08-03T18:29:19+00:00",
"generator": {
"date": "2025-08-03T18:29:19+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.6.6"
}
},
"id": "RHSA-2018:2255",
"initial_release_date": "2018-07-24T21:13:43+00:00",
"revision_history": [
{
"date": "2018-07-24T21:13:43+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2018-08-21T20:53:30+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2025-08-03T18:29:19+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Oracle Java for Red Hat Enterprise Linux Desktop 6",
"product": {
"name": "Oracle Java for Red Hat Enterprise Linux Desktop 6",
"product_id": "6Client-OracleJava-6.10.Z",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras_oracle_java:6"
}
}
},
{
"category": "product_name",
"name": "Oracle Java for Red Hat Enterprise Linux HPC Node 6",
"product": {
"name": "Oracle Java for Red Hat Enterprise Linux HPC Node 6",
"product_id": "6ComputeNode-OracleJava-6.10.Z",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras_oracle_java:6"
}
}
},
{
"category": "product_name",
"name": "Oracle Java for Red Hat Enterprise Linux Server 6",
"product": {
"name": "Oracle Java for Red Hat Enterprise Linux Server 6",
"product_id": "6Server-OracleJava-6.10.Z",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras_oracle_java:6"
}
}
},
{
"category": "product_name",
"name": "Oracle Java for Red Hat Enterprise Linux Workstation 6",
"product": {
"name": "Oracle Java for Red Hat Enterprise Linux Workstation 6",
"product_id": "6Workstation-OracleJava-6.10.Z",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras_oracle_java:6"
}
}
}
],
"category": "product_family",
"name": "Oracle Java for Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "java-1.7.0-oracle-plugin-1:1.7.0.191-1jpp.1.el6.x86_64",
"product": {
"name": "java-1.7.0-oracle-plugin-1:1.7.0.191-1jpp.1.el6.x86_64",
"product_id": "java-1.7.0-oracle-plugin-1:1.7.0.191-1jpp.1.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.7.0-oracle-plugin@1.7.0.191-1jpp.1.el6?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.7.0-oracle-javafx-1:1.7.0.191-1jpp.1.el6.x86_64",
"product": {
"name": "java-1.7.0-oracle-javafx-1:1.7.0.191-1jpp.1.el6.x86_64",
"product_id": "java-1.7.0-oracle-javafx-1:1.7.0.191-1jpp.1.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.7.0-oracle-javafx@1.7.0.191-1jpp.1.el6?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.7.0-oracle-jdbc-1:1.7.0.191-1jpp.1.el6.x86_64",
"product": {
"name": "java-1.7.0-oracle-jdbc-1:1.7.0.191-1jpp.1.el6.x86_64",
"product_id": "java-1.7.0-oracle-jdbc-1:1.7.0.191-1jpp.1.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.7.0-oracle-jdbc@1.7.0.191-1jpp.1.el6?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.7.0-oracle-1:1.7.0.191-1jpp.1.el6.x86_64",
"product": {
"name": "java-1.7.0-oracle-1:1.7.0.191-1jpp.1.el6.x86_64",
"product_id": "java-1.7.0-oracle-1:1.7.0.191-1jpp.1.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.7.0-oracle@1.7.0.191-1jpp.1.el6?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.7.0-oracle-devel-1:1.7.0.191-1jpp.1.el6.x86_64",
"product": {
"name": "java-1.7.0-oracle-devel-1:1.7.0.191-1jpp.1.el6.x86_64",
"product_id": "java-1.7.0-oracle-devel-1:1.7.0.191-1jpp.1.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.7.0-oracle-devel@1.7.0.191-1jpp.1.el6?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.7.0-oracle-src-1:1.7.0.191-1jpp.1.el6.x86_64",
"product": {
"name": "java-1.7.0-oracle-src-1:1.7.0.191-1jpp.1.el6.x86_64",
"product_id": "java-1.7.0-oracle-src-1:1.7.0.191-1jpp.1.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.7.0-oracle-src@1.7.0.191-1jpp.1.el6?arch=x86_64\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "java-1.7.0-oracle-1:1.7.0.191-1jpp.1.el6.i686",
"product": {
"name": "java-1.7.0-oracle-1:1.7.0.191-1jpp.1.el6.i686",
"product_id": "java-1.7.0-oracle-1:1.7.0.191-1jpp.1.el6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.7.0-oracle@1.7.0.191-1jpp.1.el6?arch=i686\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.7.0-oracle-devel-1:1.7.0.191-1jpp.1.el6.i686",
"product": {
"name": "java-1.7.0-oracle-devel-1:1.7.0.191-1jpp.1.el6.i686",
"product_id": "java-1.7.0-oracle-devel-1:1.7.0.191-1jpp.1.el6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.7.0-oracle-devel@1.7.0.191-1jpp.1.el6?arch=i686\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.7.0-oracle-plugin-1:1.7.0.191-1jpp.1.el6.i686",
"product": {
"name": "java-1.7.0-oracle-plugin-1:1.7.0.191-1jpp.1.el6.i686",
"product_id": "java-1.7.0-oracle-plugin-1:1.7.0.191-1jpp.1.el6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.7.0-oracle-plugin@1.7.0.191-1jpp.1.el6?arch=i686\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.7.0-oracle-javafx-1:1.7.0.191-1jpp.1.el6.i686",
"product": {
"name": "java-1.7.0-oracle-javafx-1:1.7.0.191-1jpp.1.el6.i686",
"product_id": "java-1.7.0-oracle-javafx-1:1.7.0.191-1jpp.1.el6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.7.0-oracle-javafx@1.7.0.191-1jpp.1.el6?arch=i686\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.7.0-oracle-jdbc-1:1.7.0.191-1jpp.1.el6.i686",
"product": {
"name": "java-1.7.0-oracle-jdbc-1:1.7.0.191-1jpp.1.el6.i686",
"product_id": "java-1.7.0-oracle-jdbc-1:1.7.0.191-1jpp.1.el6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.7.0-oracle-jdbc@1.7.0.191-1jpp.1.el6?arch=i686\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.7.0-oracle-src-1:1.7.0.191-1jpp.1.el6.i686",
"product": {
"name": "java-1.7.0-oracle-src-1:1.7.0.191-1jpp.1.el6.i686",
"product_id": "java-1.7.0-oracle-src-1:1.7.0.191-1jpp.1.el6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.7.0-oracle-src@1.7.0.191-1jpp.1.el6?arch=i686\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "i686"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-oracle-1:1.7.0.191-1jpp.1.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux Desktop 6",
"product_id": "6Client-OracleJava-6.10.Z:java-1.7.0-oracle-1:1.7.0.191-1jpp.1.el6.i686"
},
"product_reference": "java-1.7.0-oracle-1:1.7.0.191-1jpp.1.el6.i686",
"relates_to_product_reference": "6Client-OracleJava-6.10.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-oracle-1:1.7.0.191-1jpp.1.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Desktop 6",
"product_id": "6Client-OracleJava-6.10.Z:java-1.7.0-oracle-1:1.7.0.191-1jpp.1.el6.x86_64"
},
"product_reference": "java-1.7.0-oracle-1:1.7.0.191-1jpp.1.el6.x86_64",
"relates_to_product_reference": "6Client-OracleJava-6.10.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-oracle-devel-1:1.7.0.191-1jpp.1.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux Desktop 6",
"product_id": "6Client-OracleJava-6.10.Z:java-1.7.0-oracle-devel-1:1.7.0.191-1jpp.1.el6.i686"
},
"product_reference": "java-1.7.0-oracle-devel-1:1.7.0.191-1jpp.1.el6.i686",
"relates_to_product_reference": "6Client-OracleJava-6.10.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-oracle-devel-1:1.7.0.191-1jpp.1.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Desktop 6",
"product_id": "6Client-OracleJava-6.10.Z:java-1.7.0-oracle-devel-1:1.7.0.191-1jpp.1.el6.x86_64"
},
"product_reference": "java-1.7.0-oracle-devel-1:1.7.0.191-1jpp.1.el6.x86_64",
"relates_to_product_reference": "6Client-OracleJava-6.10.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-oracle-javafx-1:1.7.0.191-1jpp.1.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux Desktop 6",
"product_id": "6Client-OracleJava-6.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.191-1jpp.1.el6.i686"
},
"product_reference": "java-1.7.0-oracle-javafx-1:1.7.0.191-1jpp.1.el6.i686",
"relates_to_product_reference": "6Client-OracleJava-6.10.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-oracle-javafx-1:1.7.0.191-1jpp.1.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Desktop 6",
"product_id": "6Client-OracleJava-6.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.191-1jpp.1.el6.x86_64"
},
"product_reference": "java-1.7.0-oracle-javafx-1:1.7.0.191-1jpp.1.el6.x86_64",
"relates_to_product_reference": "6Client-OracleJava-6.10.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-oracle-jdbc-1:1.7.0.191-1jpp.1.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux Desktop 6",
"product_id": "6Client-OracleJava-6.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.191-1jpp.1.el6.i686"
},
"product_reference": "java-1.7.0-oracle-jdbc-1:1.7.0.191-1jpp.1.el6.i686",
"relates_to_product_reference": "6Client-OracleJava-6.10.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-oracle-jdbc-1:1.7.0.191-1jpp.1.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Desktop 6",
"product_id": "6Client-OracleJava-6.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.191-1jpp.1.el6.x86_64"
},
"product_reference": "java-1.7.0-oracle-jdbc-1:1.7.0.191-1jpp.1.el6.x86_64",
"relates_to_product_reference": "6Client-OracleJava-6.10.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-oracle-plugin-1:1.7.0.191-1jpp.1.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux Desktop 6",
"product_id": "6Client-OracleJava-6.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.191-1jpp.1.el6.i686"
},
"product_reference": "java-1.7.0-oracle-plugin-1:1.7.0.191-1jpp.1.el6.i686",
"relates_to_product_reference": "6Client-OracleJava-6.10.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-oracle-plugin-1:1.7.0.191-1jpp.1.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Desktop 6",
"product_id": "6Client-OracleJava-6.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.191-1jpp.1.el6.x86_64"
},
"product_reference": "java-1.7.0-oracle-plugin-1:1.7.0.191-1jpp.1.el6.x86_64",
"relates_to_product_reference": "6Client-OracleJava-6.10.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-oracle-src-1:1.7.0.191-1jpp.1.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux Desktop 6",
"product_id": "6Client-OracleJava-6.10.Z:java-1.7.0-oracle-src-1:1.7.0.191-1jpp.1.el6.i686"
},
"product_reference": "java-1.7.0-oracle-src-1:1.7.0.191-1jpp.1.el6.i686",
"relates_to_product_reference": "6Client-OracleJava-6.10.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-oracle-src-1:1.7.0.191-1jpp.1.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Desktop 6",
"product_id": "6Client-OracleJava-6.10.Z:java-1.7.0-oracle-src-1:1.7.0.191-1jpp.1.el6.x86_64"
},
"product_reference": "java-1.7.0-oracle-src-1:1.7.0.191-1jpp.1.el6.x86_64",
"relates_to_product_reference": "6Client-OracleJava-6.10.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-oracle-1:1.7.0.191-1jpp.1.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux HPC Node 6",
"product_id": "6ComputeNode-OracleJava-6.10.Z:java-1.7.0-oracle-1:1.7.0.191-1jpp.1.el6.i686"
},
"product_reference": "java-1.7.0-oracle-1:1.7.0.191-1jpp.1.el6.i686",
"relates_to_product_reference": "6ComputeNode-OracleJava-6.10.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-oracle-1:1.7.0.191-1jpp.1.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux HPC Node 6",
"product_id": "6ComputeNode-OracleJava-6.10.Z:java-1.7.0-oracle-1:1.7.0.191-1jpp.1.el6.x86_64"
},
"product_reference": "java-1.7.0-oracle-1:1.7.0.191-1jpp.1.el6.x86_64",
"relates_to_product_reference": "6ComputeNode-OracleJava-6.10.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-oracle-devel-1:1.7.0.191-1jpp.1.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux HPC Node 6",
"product_id": "6ComputeNode-OracleJava-6.10.Z:java-1.7.0-oracle-devel-1:1.7.0.191-1jpp.1.el6.i686"
},
"product_reference": "java-1.7.0-oracle-devel-1:1.7.0.191-1jpp.1.el6.i686",
"relates_to_product_reference": "6ComputeNode-OracleJava-6.10.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-oracle-devel-1:1.7.0.191-1jpp.1.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux HPC Node 6",
"product_id": "6ComputeNode-OracleJava-6.10.Z:java-1.7.0-oracle-devel-1:1.7.0.191-1jpp.1.el6.x86_64"
},
"product_reference": "java-1.7.0-oracle-devel-1:1.7.0.191-1jpp.1.el6.x86_64",
"relates_to_product_reference": "6ComputeNode-OracleJava-6.10.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-oracle-javafx-1:1.7.0.191-1jpp.1.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux HPC Node 6",
"product_id": "6ComputeNode-OracleJava-6.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.191-1jpp.1.el6.i686"
},
"product_reference": "java-1.7.0-oracle-javafx-1:1.7.0.191-1jpp.1.el6.i686",
"relates_to_product_reference": "6ComputeNode-OracleJava-6.10.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-oracle-javafx-1:1.7.0.191-1jpp.1.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux HPC Node 6",
"product_id": "6ComputeNode-OracleJava-6.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.191-1jpp.1.el6.x86_64"
},
"product_reference": "java-1.7.0-oracle-javafx-1:1.7.0.191-1jpp.1.el6.x86_64",
"relates_to_product_reference": "6ComputeNode-OracleJava-6.10.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-oracle-jdbc-1:1.7.0.191-1jpp.1.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux HPC Node 6",
"product_id": "6ComputeNode-OracleJava-6.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.191-1jpp.1.el6.i686"
},
"product_reference": "java-1.7.0-oracle-jdbc-1:1.7.0.191-1jpp.1.el6.i686",
"relates_to_product_reference": "6ComputeNode-OracleJava-6.10.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-oracle-jdbc-1:1.7.0.191-1jpp.1.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux HPC Node 6",
"product_id": "6ComputeNode-OracleJava-6.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.191-1jpp.1.el6.x86_64"
},
"product_reference": "java-1.7.0-oracle-jdbc-1:1.7.0.191-1jpp.1.el6.x86_64",
"relates_to_product_reference": "6ComputeNode-OracleJava-6.10.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-oracle-plugin-1:1.7.0.191-1jpp.1.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux HPC Node 6",
"product_id": "6ComputeNode-OracleJava-6.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.191-1jpp.1.el6.i686"
},
"product_reference": "java-1.7.0-oracle-plugin-1:1.7.0.191-1jpp.1.el6.i686",
"relates_to_product_reference": "6ComputeNode-OracleJava-6.10.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-oracle-plugin-1:1.7.0.191-1jpp.1.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux HPC Node 6",
"product_id": "6ComputeNode-OracleJava-6.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.191-1jpp.1.el6.x86_64"
},
"product_reference": "java-1.7.0-oracle-plugin-1:1.7.0.191-1jpp.1.el6.x86_64",
"relates_to_product_reference": "6ComputeNode-OracleJava-6.10.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-oracle-src-1:1.7.0.191-1jpp.1.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux HPC Node 6",
"product_id": "6ComputeNode-OracleJava-6.10.Z:java-1.7.0-oracle-src-1:1.7.0.191-1jpp.1.el6.i686"
},
"product_reference": "java-1.7.0-oracle-src-1:1.7.0.191-1jpp.1.el6.i686",
"relates_to_product_reference": "6ComputeNode-OracleJava-6.10.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-oracle-src-1:1.7.0.191-1jpp.1.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux HPC Node 6",
"product_id": "6ComputeNode-OracleJava-6.10.Z:java-1.7.0-oracle-src-1:1.7.0.191-1jpp.1.el6.x86_64"
},
"product_reference": "java-1.7.0-oracle-src-1:1.7.0.191-1jpp.1.el6.x86_64",
"relates_to_product_reference": "6ComputeNode-OracleJava-6.10.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-oracle-1:1.7.0.191-1jpp.1.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux Server 6",
"product_id": "6Server-OracleJava-6.10.Z:java-1.7.0-oracle-1:1.7.0.191-1jpp.1.el6.i686"
},
"product_reference": "java-1.7.0-oracle-1:1.7.0.191-1jpp.1.el6.i686",
"relates_to_product_reference": "6Server-OracleJava-6.10.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-oracle-1:1.7.0.191-1jpp.1.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Server 6",
"product_id": "6Server-OracleJava-6.10.Z:java-1.7.0-oracle-1:1.7.0.191-1jpp.1.el6.x86_64"
},
"product_reference": "java-1.7.0-oracle-1:1.7.0.191-1jpp.1.el6.x86_64",
"relates_to_product_reference": "6Server-OracleJava-6.10.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-oracle-devel-1:1.7.0.191-1jpp.1.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux Server 6",
"product_id": "6Server-OracleJava-6.10.Z:java-1.7.0-oracle-devel-1:1.7.0.191-1jpp.1.el6.i686"
},
"product_reference": "java-1.7.0-oracle-devel-1:1.7.0.191-1jpp.1.el6.i686",
"relates_to_product_reference": "6Server-OracleJava-6.10.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-oracle-devel-1:1.7.0.191-1jpp.1.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Server 6",
"product_id": "6Server-OracleJava-6.10.Z:java-1.7.0-oracle-devel-1:1.7.0.191-1jpp.1.el6.x86_64"
},
"product_reference": "java-1.7.0-oracle-devel-1:1.7.0.191-1jpp.1.el6.x86_64",
"relates_to_product_reference": "6Server-OracleJava-6.10.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-oracle-javafx-1:1.7.0.191-1jpp.1.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux Server 6",
"product_id": "6Server-OracleJava-6.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.191-1jpp.1.el6.i686"
},
"product_reference": "java-1.7.0-oracle-javafx-1:1.7.0.191-1jpp.1.el6.i686",
"relates_to_product_reference": "6Server-OracleJava-6.10.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-oracle-javafx-1:1.7.0.191-1jpp.1.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Server 6",
"product_id": "6Server-OracleJava-6.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.191-1jpp.1.el6.x86_64"
},
"product_reference": "java-1.7.0-oracle-javafx-1:1.7.0.191-1jpp.1.el6.x86_64",
"relates_to_product_reference": "6Server-OracleJava-6.10.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-oracle-jdbc-1:1.7.0.191-1jpp.1.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux Server 6",
"product_id": "6Server-OracleJava-6.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.191-1jpp.1.el6.i686"
},
"product_reference": "java-1.7.0-oracle-jdbc-1:1.7.0.191-1jpp.1.el6.i686",
"relates_to_product_reference": "6Server-OracleJava-6.10.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-oracle-jdbc-1:1.7.0.191-1jpp.1.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Server 6",
"product_id": "6Server-OracleJava-6.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.191-1jpp.1.el6.x86_64"
},
"product_reference": "java-1.7.0-oracle-jdbc-1:1.7.0.191-1jpp.1.el6.x86_64",
"relates_to_product_reference": "6Server-OracleJava-6.10.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-oracle-plugin-1:1.7.0.191-1jpp.1.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux Server 6",
"product_id": "6Server-OracleJava-6.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.191-1jpp.1.el6.i686"
},
"product_reference": "java-1.7.0-oracle-plugin-1:1.7.0.191-1jpp.1.el6.i686",
"relates_to_product_reference": "6Server-OracleJava-6.10.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-oracle-plugin-1:1.7.0.191-1jpp.1.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Server 6",
"product_id": "6Server-OracleJava-6.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.191-1jpp.1.el6.x86_64"
},
"product_reference": "java-1.7.0-oracle-plugin-1:1.7.0.191-1jpp.1.el6.x86_64",
"relates_to_product_reference": "6Server-OracleJava-6.10.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-oracle-src-1:1.7.0.191-1jpp.1.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux Server 6",
"product_id": "6Server-OracleJava-6.10.Z:java-1.7.0-oracle-src-1:1.7.0.191-1jpp.1.el6.i686"
},
"product_reference": "java-1.7.0-oracle-src-1:1.7.0.191-1jpp.1.el6.i686",
"relates_to_product_reference": "6Server-OracleJava-6.10.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-oracle-src-1:1.7.0.191-1jpp.1.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Server 6",
"product_id": "6Server-OracleJava-6.10.Z:java-1.7.0-oracle-src-1:1.7.0.191-1jpp.1.el6.x86_64"
},
"product_reference": "java-1.7.0-oracle-src-1:1.7.0.191-1jpp.1.el6.x86_64",
"relates_to_product_reference": "6Server-OracleJava-6.10.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-oracle-1:1.7.0.191-1jpp.1.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux Workstation 6",
"product_id": "6Workstation-OracleJava-6.10.Z:java-1.7.0-oracle-1:1.7.0.191-1jpp.1.el6.i686"
},
"product_reference": "java-1.7.0-oracle-1:1.7.0.191-1jpp.1.el6.i686",
"relates_to_product_reference": "6Workstation-OracleJava-6.10.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-oracle-1:1.7.0.191-1jpp.1.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Workstation 6",
"product_id": "6Workstation-OracleJava-6.10.Z:java-1.7.0-oracle-1:1.7.0.191-1jpp.1.el6.x86_64"
},
"product_reference": "java-1.7.0-oracle-1:1.7.0.191-1jpp.1.el6.x86_64",
"relates_to_product_reference": "6Workstation-OracleJava-6.10.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-oracle-devel-1:1.7.0.191-1jpp.1.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux Workstation 6",
"product_id": "6Workstation-OracleJava-6.10.Z:java-1.7.0-oracle-devel-1:1.7.0.191-1jpp.1.el6.i686"
},
"product_reference": "java-1.7.0-oracle-devel-1:1.7.0.191-1jpp.1.el6.i686",
"relates_to_product_reference": "6Workstation-OracleJava-6.10.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-oracle-devel-1:1.7.0.191-1jpp.1.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Workstation 6",
"product_id": "6Workstation-OracleJava-6.10.Z:java-1.7.0-oracle-devel-1:1.7.0.191-1jpp.1.el6.x86_64"
},
"product_reference": "java-1.7.0-oracle-devel-1:1.7.0.191-1jpp.1.el6.x86_64",
"relates_to_product_reference": "6Workstation-OracleJava-6.10.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-oracle-javafx-1:1.7.0.191-1jpp.1.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux Workstation 6",
"product_id": "6Workstation-OracleJava-6.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.191-1jpp.1.el6.i686"
},
"product_reference": "java-1.7.0-oracle-javafx-1:1.7.0.191-1jpp.1.el6.i686",
"relates_to_product_reference": "6Workstation-OracleJava-6.10.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-oracle-javafx-1:1.7.0.191-1jpp.1.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Workstation 6",
"product_id": "6Workstation-OracleJava-6.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.191-1jpp.1.el6.x86_64"
},
"product_reference": "java-1.7.0-oracle-javafx-1:1.7.0.191-1jpp.1.el6.x86_64",
"relates_to_product_reference": "6Workstation-OracleJava-6.10.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-oracle-jdbc-1:1.7.0.191-1jpp.1.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux Workstation 6",
"product_id": "6Workstation-OracleJava-6.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.191-1jpp.1.el6.i686"
},
"product_reference": "java-1.7.0-oracle-jdbc-1:1.7.0.191-1jpp.1.el6.i686",
"relates_to_product_reference": "6Workstation-OracleJava-6.10.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-oracle-jdbc-1:1.7.0.191-1jpp.1.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Workstation 6",
"product_id": "6Workstation-OracleJava-6.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.191-1jpp.1.el6.x86_64"
},
"product_reference": "java-1.7.0-oracle-jdbc-1:1.7.0.191-1jpp.1.el6.x86_64",
"relates_to_product_reference": "6Workstation-OracleJava-6.10.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-oracle-plugin-1:1.7.0.191-1jpp.1.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux Workstation 6",
"product_id": "6Workstation-OracleJava-6.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.191-1jpp.1.el6.i686"
},
"product_reference": "java-1.7.0-oracle-plugin-1:1.7.0.191-1jpp.1.el6.i686",
"relates_to_product_reference": "6Workstation-OracleJava-6.10.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-oracle-plugin-1:1.7.0.191-1jpp.1.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Workstation 6",
"product_id": "6Workstation-OracleJava-6.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.191-1jpp.1.el6.x86_64"
},
"product_reference": "java-1.7.0-oracle-plugin-1:1.7.0.191-1jpp.1.el6.x86_64",
"relates_to_product_reference": "6Workstation-OracleJava-6.10.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-oracle-src-1:1.7.0.191-1jpp.1.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux Workstation 6",
"product_id": "6Workstation-OracleJava-6.10.Z:java-1.7.0-oracle-src-1:1.7.0.191-1jpp.1.el6.i686"
},
"product_reference": "java-1.7.0-oracle-src-1:1.7.0.191-1jpp.1.el6.i686",
"relates_to_product_reference": "6Workstation-OracleJava-6.10.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-oracle-src-1:1.7.0.191-1jpp.1.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Workstation 6",
"product_id": "6Workstation-OracleJava-6.10.Z:java-1.7.0-oracle-src-1:1.7.0.191-1jpp.1.el6.x86_64"
},
"product_reference": "java-1.7.0-oracle-src-1:1.7.0.191-1jpp.1.el6.x86_64",
"relates_to_product_reference": "6Workstation-OracleJava-6.10.Z"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2018-2940",
"discovery_date": "2018-07-17T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1602146"
}
],
"notes": [
{
"category": "description",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries). Supported versions that are affected are Java SE: 6u191, 7u181, 8u172 and 10.0.1; Java SE Embedded: 8u171. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 4.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "JDK: unspecified vulnerability fixed in 6u201, 7u191, 8u181, and 10.0.2 (Libraries)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-OracleJava-6.10.Z:java-1.7.0-oracle-1:1.7.0.191-1jpp.1.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.7.0-oracle-1:1.7.0.191-1jpp.1.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.7.0-oracle-devel-1:1.7.0.191-1jpp.1.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.7.0-oracle-devel-1:1.7.0.191-1jpp.1.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.191-1jpp.1.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.191-1jpp.1.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.191-1jpp.1.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.191-1jpp.1.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.191-1jpp.1.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.191-1jpp.1.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.7.0-oracle-src-1:1.7.0.191-1jpp.1.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.7.0-oracle-src-1:1.7.0.191-1jpp.1.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.7.0-oracle-1:1.7.0.191-1jpp.1.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.7.0-oracle-1:1.7.0.191-1jpp.1.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.7.0-oracle-devel-1:1.7.0.191-1jpp.1.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.7.0-oracle-devel-1:1.7.0.191-1jpp.1.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.191-1jpp.1.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.191-1jpp.1.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.191-1jpp.1.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.191-1jpp.1.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.191-1jpp.1.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.191-1jpp.1.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.7.0-oracle-src-1:1.7.0.191-1jpp.1.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.7.0-oracle-src-1:1.7.0.191-1jpp.1.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.7.0-oracle-1:1.7.0.191-1jpp.1.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.7.0-oracle-1:1.7.0.191-1jpp.1.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.7.0-oracle-devel-1:1.7.0.191-1jpp.1.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.7.0-oracle-devel-1:1.7.0.191-1jpp.1.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.191-1jpp.1.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.191-1jpp.1.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.191-1jpp.1.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.191-1jpp.1.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.191-1jpp.1.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.191-1jpp.1.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.7.0-oracle-src-1:1.7.0.191-1jpp.1.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.7.0-oracle-src-1:1.7.0.191-1jpp.1.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.7.0-oracle-1:1.7.0.191-1jpp.1.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.7.0-oracle-1:1.7.0.191-1jpp.1.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.7.0-oracle-devel-1:1.7.0.191-1jpp.1.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.7.0-oracle-devel-1:1.7.0.191-1jpp.1.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.191-1jpp.1.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.191-1jpp.1.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.191-1jpp.1.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.191-1jpp.1.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.191-1jpp.1.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.191-1jpp.1.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.7.0-oracle-src-1:1.7.0.191-1jpp.1.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.7.0-oracle-src-1:1.7.0.191-1jpp.1.el6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-2940"
},
{
"category": "external",
"summary": "RHBZ#1602146",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1602146"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-2940",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-2940"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2940",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2940"
},
{
"category": "external",
"summary": "http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html#AppendixJAVA",
"url": "http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html#AppendixJAVA"
}
],
"release_date": "2018-07-17T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-07-24T21:13:43+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.",
"product_ids": [
"6Client-OracleJava-6.10.Z:java-1.7.0-oracle-1:1.7.0.191-1jpp.1.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.7.0-oracle-1:1.7.0.191-1jpp.1.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.7.0-oracle-devel-1:1.7.0.191-1jpp.1.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.7.0-oracle-devel-1:1.7.0.191-1jpp.1.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.191-1jpp.1.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.191-1jpp.1.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.191-1jpp.1.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.191-1jpp.1.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.191-1jpp.1.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.191-1jpp.1.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.7.0-oracle-src-1:1.7.0.191-1jpp.1.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.7.0-oracle-src-1:1.7.0.191-1jpp.1.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.7.0-oracle-1:1.7.0.191-1jpp.1.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.7.0-oracle-1:1.7.0.191-1jpp.1.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.7.0-oracle-devel-1:1.7.0.191-1jpp.1.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.7.0-oracle-devel-1:1.7.0.191-1jpp.1.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.191-1jpp.1.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.191-1jpp.1.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.191-1jpp.1.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.191-1jpp.1.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.191-1jpp.1.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.191-1jpp.1.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.7.0-oracle-src-1:1.7.0.191-1jpp.1.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.7.0-oracle-src-1:1.7.0.191-1jpp.1.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.7.0-oracle-1:1.7.0.191-1jpp.1.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.7.0-oracle-1:1.7.0.191-1jpp.1.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.7.0-oracle-devel-1:1.7.0.191-1jpp.1.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.7.0-oracle-devel-1:1.7.0.191-1jpp.1.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.191-1jpp.1.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.191-1jpp.1.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.191-1jpp.1.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.191-1jpp.1.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.191-1jpp.1.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.191-1jpp.1.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.7.0-oracle-src-1:1.7.0.191-1jpp.1.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.7.0-oracle-src-1:1.7.0.191-1jpp.1.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.7.0-oracle-1:1.7.0.191-1jpp.1.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.7.0-oracle-1:1.7.0.191-1jpp.1.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.7.0-oracle-devel-1:1.7.0.191-1jpp.1.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.7.0-oracle-devel-1:1.7.0.191-1jpp.1.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.191-1jpp.1.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.191-1jpp.1.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.191-1jpp.1.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.191-1jpp.1.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.191-1jpp.1.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.191-1jpp.1.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.7.0-oracle-src-1:1.7.0.191-1jpp.1.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.7.0-oracle-src-1:1.7.0.191-1jpp.1.el6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:2255"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"6Client-OracleJava-6.10.Z:java-1.7.0-oracle-1:1.7.0.191-1jpp.1.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.7.0-oracle-1:1.7.0.191-1jpp.1.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.7.0-oracle-devel-1:1.7.0.191-1jpp.1.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.7.0-oracle-devel-1:1.7.0.191-1jpp.1.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.191-1jpp.1.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.191-1jpp.1.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.191-1jpp.1.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.191-1jpp.1.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.191-1jpp.1.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.191-1jpp.1.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.7.0-oracle-src-1:1.7.0.191-1jpp.1.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.7.0-oracle-src-1:1.7.0.191-1jpp.1.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.7.0-oracle-1:1.7.0.191-1jpp.1.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.7.0-oracle-1:1.7.0.191-1jpp.1.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.7.0-oracle-devel-1:1.7.0.191-1jpp.1.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.7.0-oracle-devel-1:1.7.0.191-1jpp.1.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.191-1jpp.1.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.191-1jpp.1.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.191-1jpp.1.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.191-1jpp.1.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.191-1jpp.1.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.191-1jpp.1.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.7.0-oracle-src-1:1.7.0.191-1jpp.1.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.7.0-oracle-src-1:1.7.0.191-1jpp.1.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.7.0-oracle-1:1.7.0.191-1jpp.1.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.7.0-oracle-1:1.7.0.191-1jpp.1.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.7.0-oracle-devel-1:1.7.0.191-1jpp.1.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.7.0-oracle-devel-1:1.7.0.191-1jpp.1.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.191-1jpp.1.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.191-1jpp.1.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.191-1jpp.1.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.191-1jpp.1.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.191-1jpp.1.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.191-1jpp.1.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.7.0-oracle-src-1:1.7.0.191-1jpp.1.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.7.0-oracle-src-1:1.7.0.191-1jpp.1.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.7.0-oracle-1:1.7.0.191-1jpp.1.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.7.0-oracle-1:1.7.0.191-1jpp.1.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.7.0-oracle-devel-1:1.7.0.191-1jpp.1.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.7.0-oracle-devel-1:1.7.0.191-1jpp.1.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.191-1jpp.1.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.191-1jpp.1.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.191-1jpp.1.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.191-1jpp.1.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.191-1jpp.1.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.191-1jpp.1.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.7.0-oracle-src-1:1.7.0.191-1jpp.1.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.7.0-oracle-src-1:1.7.0.191-1jpp.1.el6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "JDK: unspecified vulnerability fixed in 6u201, 7u191, 8u181, and 10.0.2 (Libraries)"
},
{
"cve": "CVE-2018-2941",
"discovery_date": "2018-07-17T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1602143"
}
],
"notes": [
{
"category": "description",
"text": "Vulnerability in the Java SE component of Oracle Java SE (subcomponent: JavaFX). Supported versions that are affected are Java SE: 7u181, 8u172 and 10.0.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 8.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "JDK: unspecified vulnerability fixed in 7u191, 8u181, and 10.0.2 (JavaFX)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-OracleJava-6.10.Z:java-1.7.0-oracle-1:1.7.0.191-1jpp.1.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.7.0-oracle-1:1.7.0.191-1jpp.1.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.7.0-oracle-devel-1:1.7.0.191-1jpp.1.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.7.0-oracle-devel-1:1.7.0.191-1jpp.1.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.191-1jpp.1.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.191-1jpp.1.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.191-1jpp.1.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.191-1jpp.1.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.191-1jpp.1.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.191-1jpp.1.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.7.0-oracle-src-1:1.7.0.191-1jpp.1.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.7.0-oracle-src-1:1.7.0.191-1jpp.1.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.7.0-oracle-1:1.7.0.191-1jpp.1.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.7.0-oracle-1:1.7.0.191-1jpp.1.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.7.0-oracle-devel-1:1.7.0.191-1jpp.1.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.7.0-oracle-devel-1:1.7.0.191-1jpp.1.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.191-1jpp.1.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.191-1jpp.1.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.191-1jpp.1.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.191-1jpp.1.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.191-1jpp.1.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.191-1jpp.1.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.7.0-oracle-src-1:1.7.0.191-1jpp.1.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.7.0-oracle-src-1:1.7.0.191-1jpp.1.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.7.0-oracle-1:1.7.0.191-1jpp.1.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.7.0-oracle-1:1.7.0.191-1jpp.1.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.7.0-oracle-devel-1:1.7.0.191-1jpp.1.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.7.0-oracle-devel-1:1.7.0.191-1jpp.1.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.191-1jpp.1.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.191-1jpp.1.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.191-1jpp.1.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.191-1jpp.1.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.191-1jpp.1.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.191-1jpp.1.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.7.0-oracle-src-1:1.7.0.191-1jpp.1.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.7.0-oracle-src-1:1.7.0.191-1jpp.1.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.7.0-oracle-1:1.7.0.191-1jpp.1.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.7.0-oracle-1:1.7.0.191-1jpp.1.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.7.0-oracle-devel-1:1.7.0.191-1jpp.1.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.7.0-oracle-devel-1:1.7.0.191-1jpp.1.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.191-1jpp.1.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.191-1jpp.1.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.191-1jpp.1.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.191-1jpp.1.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.191-1jpp.1.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.191-1jpp.1.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.7.0-oracle-src-1:1.7.0.191-1jpp.1.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.7.0-oracle-src-1:1.7.0.191-1jpp.1.el6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-2941"
},
{
"category": "external",
"summary": "RHBZ#1602143",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1602143"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-2941",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-2941"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2941",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2941"
},
{
"category": "external",
"summary": "http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html#AppendixJAVA",
"url": "http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html#AppendixJAVA"
}
],
"release_date": "2018-07-17T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-07-24T21:13:43+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.",
"product_ids": [
"6Client-OracleJava-6.10.Z:java-1.7.0-oracle-1:1.7.0.191-1jpp.1.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.7.0-oracle-1:1.7.0.191-1jpp.1.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.7.0-oracle-devel-1:1.7.0.191-1jpp.1.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.7.0-oracle-devel-1:1.7.0.191-1jpp.1.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.191-1jpp.1.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.191-1jpp.1.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.191-1jpp.1.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.191-1jpp.1.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.191-1jpp.1.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.191-1jpp.1.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.7.0-oracle-src-1:1.7.0.191-1jpp.1.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.7.0-oracle-src-1:1.7.0.191-1jpp.1.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.7.0-oracle-1:1.7.0.191-1jpp.1.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.7.0-oracle-1:1.7.0.191-1jpp.1.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.7.0-oracle-devel-1:1.7.0.191-1jpp.1.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.7.0-oracle-devel-1:1.7.0.191-1jpp.1.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.191-1jpp.1.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.191-1jpp.1.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.191-1jpp.1.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.191-1jpp.1.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.191-1jpp.1.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.191-1jpp.1.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.7.0-oracle-src-1:1.7.0.191-1jpp.1.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.7.0-oracle-src-1:1.7.0.191-1jpp.1.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.7.0-oracle-1:1.7.0.191-1jpp.1.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.7.0-oracle-1:1.7.0.191-1jpp.1.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.7.0-oracle-devel-1:1.7.0.191-1jpp.1.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.7.0-oracle-devel-1:1.7.0.191-1jpp.1.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.191-1jpp.1.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.191-1jpp.1.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.191-1jpp.1.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.191-1jpp.1.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.191-1jpp.1.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.191-1jpp.1.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.7.0-oracle-src-1:1.7.0.191-1jpp.1.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.7.0-oracle-src-1:1.7.0.191-1jpp.1.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.7.0-oracle-1:1.7.0.191-1jpp.1.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.7.0-oracle-1:1.7.0.191-1jpp.1.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.7.0-oracle-devel-1:1.7.0.191-1jpp.1.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.7.0-oracle-devel-1:1.7.0.191-1jpp.1.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.191-1jpp.1.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.191-1jpp.1.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.191-1jpp.1.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.191-1jpp.1.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.191-1jpp.1.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.191-1jpp.1.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.7.0-oracle-src-1:1.7.0.191-1jpp.1.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.7.0-oracle-src-1:1.7.0.191-1jpp.1.el6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:2255"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"6Client-OracleJava-6.10.Z:java-1.7.0-oracle-1:1.7.0.191-1jpp.1.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.7.0-oracle-1:1.7.0.191-1jpp.1.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.7.0-oracle-devel-1:1.7.0.191-1jpp.1.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.7.0-oracle-devel-1:1.7.0.191-1jpp.1.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.191-1jpp.1.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.191-1jpp.1.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.191-1jpp.1.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.191-1jpp.1.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.191-1jpp.1.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.191-1jpp.1.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.7.0-oracle-src-1:1.7.0.191-1jpp.1.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.7.0-oracle-src-1:1.7.0.191-1jpp.1.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.7.0-oracle-1:1.7.0.191-1jpp.1.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.7.0-oracle-1:1.7.0.191-1jpp.1.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.7.0-oracle-devel-1:1.7.0.191-1jpp.1.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.7.0-oracle-devel-1:1.7.0.191-1jpp.1.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.191-1jpp.1.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.191-1jpp.1.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.191-1jpp.1.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.191-1jpp.1.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.191-1jpp.1.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.191-1jpp.1.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.7.0-oracle-src-1:1.7.0.191-1jpp.1.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.7.0-oracle-src-1:1.7.0.191-1jpp.1.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.7.0-oracle-1:1.7.0.191-1jpp.1.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.7.0-oracle-1:1.7.0.191-1jpp.1.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.7.0-oracle-devel-1:1.7.0.191-1jpp.1.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.7.0-oracle-devel-1:1.7.0.191-1jpp.1.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.191-1jpp.1.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.191-1jpp.1.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.191-1jpp.1.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.191-1jpp.1.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.191-1jpp.1.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.191-1jpp.1.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.7.0-oracle-src-1:1.7.0.191-1jpp.1.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.7.0-oracle-src-1:1.7.0.191-1jpp.1.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.7.0-oracle-1:1.7.0.191-1jpp.1.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.7.0-oracle-1:1.7.0.191-1jpp.1.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.7.0-oracle-devel-1:1.7.0.191-1jpp.1.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.7.0-oracle-devel-1:1.7.0.191-1jpp.1.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.191-1jpp.1.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.191-1jpp.1.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.191-1jpp.1.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.191-1jpp.1.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.191-1jpp.1.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.191-1jpp.1.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.7.0-oracle-src-1:1.7.0.191-1jpp.1.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.7.0-oracle-src-1:1.7.0.191-1jpp.1.el6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "JDK: unspecified vulnerability fixed in 7u191, 8u181, and 10.0.2 (JavaFX)"
},
{
"cve": "CVE-2018-2952",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2018-07-11T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1600925"
}
],
"notes": [
{
"category": "description",
"text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Concurrency). Supported versions that are affected are Java SE: 6u191, 7u181, 8u172 and 10.0.1; Java SE Embedded: 8u171; JRockit: R28.3.18. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 3.7 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK: insufficient index validation in PatternSyntaxException getMessage() (Concurrency, 8199547)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-OracleJava-6.10.Z:java-1.7.0-oracle-1:1.7.0.191-1jpp.1.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.7.0-oracle-1:1.7.0.191-1jpp.1.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.7.0-oracle-devel-1:1.7.0.191-1jpp.1.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.7.0-oracle-devel-1:1.7.0.191-1jpp.1.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.191-1jpp.1.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.191-1jpp.1.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.191-1jpp.1.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.191-1jpp.1.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.191-1jpp.1.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.191-1jpp.1.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.7.0-oracle-src-1:1.7.0.191-1jpp.1.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.7.0-oracle-src-1:1.7.0.191-1jpp.1.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.7.0-oracle-1:1.7.0.191-1jpp.1.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.7.0-oracle-1:1.7.0.191-1jpp.1.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.7.0-oracle-devel-1:1.7.0.191-1jpp.1.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.7.0-oracle-devel-1:1.7.0.191-1jpp.1.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.191-1jpp.1.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.191-1jpp.1.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.191-1jpp.1.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.191-1jpp.1.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.191-1jpp.1.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.191-1jpp.1.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.7.0-oracle-src-1:1.7.0.191-1jpp.1.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.7.0-oracle-src-1:1.7.0.191-1jpp.1.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.7.0-oracle-1:1.7.0.191-1jpp.1.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.7.0-oracle-1:1.7.0.191-1jpp.1.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.7.0-oracle-devel-1:1.7.0.191-1jpp.1.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.7.0-oracle-devel-1:1.7.0.191-1jpp.1.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.191-1jpp.1.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.191-1jpp.1.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.191-1jpp.1.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.191-1jpp.1.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.191-1jpp.1.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.191-1jpp.1.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.7.0-oracle-src-1:1.7.0.191-1jpp.1.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.7.0-oracle-src-1:1.7.0.191-1jpp.1.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.7.0-oracle-1:1.7.0.191-1jpp.1.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.7.0-oracle-1:1.7.0.191-1jpp.1.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.7.0-oracle-devel-1:1.7.0.191-1jpp.1.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.7.0-oracle-devel-1:1.7.0.191-1jpp.1.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.191-1jpp.1.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.191-1jpp.1.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.191-1jpp.1.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.191-1jpp.1.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.191-1jpp.1.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.191-1jpp.1.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.7.0-oracle-src-1:1.7.0.191-1jpp.1.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.7.0-oracle-src-1:1.7.0.191-1jpp.1.el6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-2952"
},
{
"category": "external",
"summary": "RHBZ#1600925",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1600925"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-2952",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-2952"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2952",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2952"
}
],
"release_date": "2018-07-17T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-07-24T21:13:43+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.",
"product_ids": [
"6Client-OracleJava-6.10.Z:java-1.7.0-oracle-1:1.7.0.191-1jpp.1.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.7.0-oracle-1:1.7.0.191-1jpp.1.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.7.0-oracle-devel-1:1.7.0.191-1jpp.1.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.7.0-oracle-devel-1:1.7.0.191-1jpp.1.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.191-1jpp.1.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.191-1jpp.1.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.191-1jpp.1.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.191-1jpp.1.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.191-1jpp.1.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.191-1jpp.1.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.7.0-oracle-src-1:1.7.0.191-1jpp.1.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.7.0-oracle-src-1:1.7.0.191-1jpp.1.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.7.0-oracle-1:1.7.0.191-1jpp.1.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.7.0-oracle-1:1.7.0.191-1jpp.1.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.7.0-oracle-devel-1:1.7.0.191-1jpp.1.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.7.0-oracle-devel-1:1.7.0.191-1jpp.1.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.191-1jpp.1.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.191-1jpp.1.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.191-1jpp.1.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.191-1jpp.1.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.191-1jpp.1.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.191-1jpp.1.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.7.0-oracle-src-1:1.7.0.191-1jpp.1.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.7.0-oracle-src-1:1.7.0.191-1jpp.1.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.7.0-oracle-1:1.7.0.191-1jpp.1.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.7.0-oracle-1:1.7.0.191-1jpp.1.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.7.0-oracle-devel-1:1.7.0.191-1jpp.1.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.7.0-oracle-devel-1:1.7.0.191-1jpp.1.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.191-1jpp.1.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.191-1jpp.1.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.191-1jpp.1.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.191-1jpp.1.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.191-1jpp.1.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.191-1jpp.1.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.7.0-oracle-src-1:1.7.0.191-1jpp.1.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.7.0-oracle-src-1:1.7.0.191-1jpp.1.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.7.0-oracle-1:1.7.0.191-1jpp.1.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.7.0-oracle-1:1.7.0.191-1jpp.1.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.7.0-oracle-devel-1:1.7.0.191-1jpp.1.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.7.0-oracle-devel-1:1.7.0.191-1jpp.1.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.191-1jpp.1.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.191-1jpp.1.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.191-1jpp.1.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.191-1jpp.1.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.191-1jpp.1.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.191-1jpp.1.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.7.0-oracle-src-1:1.7.0.191-1jpp.1.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.7.0-oracle-src-1:1.7.0.191-1jpp.1.el6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:2255"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 3.7,
"baseSeverity": "LOW",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"6Client-OracleJava-6.10.Z:java-1.7.0-oracle-1:1.7.0.191-1jpp.1.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.7.0-oracle-1:1.7.0.191-1jpp.1.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.7.0-oracle-devel-1:1.7.0.191-1jpp.1.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.7.0-oracle-devel-1:1.7.0.191-1jpp.1.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.191-1jpp.1.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.191-1jpp.1.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.191-1jpp.1.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.191-1jpp.1.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.191-1jpp.1.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.191-1jpp.1.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.7.0-oracle-src-1:1.7.0.191-1jpp.1.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.7.0-oracle-src-1:1.7.0.191-1jpp.1.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.7.0-oracle-1:1.7.0.191-1jpp.1.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.7.0-oracle-1:1.7.0.191-1jpp.1.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.7.0-oracle-devel-1:1.7.0.191-1jpp.1.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.7.0-oracle-devel-1:1.7.0.191-1jpp.1.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.191-1jpp.1.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.191-1jpp.1.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.191-1jpp.1.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.191-1jpp.1.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.191-1jpp.1.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.191-1jpp.1.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.7.0-oracle-src-1:1.7.0.191-1jpp.1.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.7.0-oracle-src-1:1.7.0.191-1jpp.1.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.7.0-oracle-1:1.7.0.191-1jpp.1.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.7.0-oracle-1:1.7.0.191-1jpp.1.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.7.0-oracle-devel-1:1.7.0.191-1jpp.1.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.7.0-oracle-devel-1:1.7.0.191-1jpp.1.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.191-1jpp.1.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.191-1jpp.1.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.191-1jpp.1.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.191-1jpp.1.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.191-1jpp.1.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.191-1jpp.1.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.7.0-oracle-src-1:1.7.0.191-1jpp.1.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.7.0-oracle-src-1:1.7.0.191-1jpp.1.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.7.0-oracle-1:1.7.0.191-1jpp.1.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.7.0-oracle-1:1.7.0.191-1jpp.1.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.7.0-oracle-devel-1:1.7.0.191-1jpp.1.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.7.0-oracle-devel-1:1.7.0.191-1jpp.1.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.191-1jpp.1.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.191-1jpp.1.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.191-1jpp.1.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.191-1jpp.1.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.191-1jpp.1.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.191-1jpp.1.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.7.0-oracle-src-1:1.7.0.191-1jpp.1.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.7.0-oracle-src-1:1.7.0.191-1jpp.1.el6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "OpenJDK: insufficient index validation in PatternSyntaxException getMessage() (Concurrency, 8199547)"
},
{
"cve": "CVE-2018-2973",
"discovery_date": "2018-07-17T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1602145"
}
],
"notes": [
{
"category": "description",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: JSSE). Supported versions that are affected are Java SE: 6u191, 7u181, 8u172 and 10.0.1; Java SE Embedded: 8u171. Difficult to exploit vulnerability allows unauthenticated attacker with network access via SSL/TLS to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 5.9 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "JDK: unspecified vulnerability fixed in 6u201, 7u191, 8u181, and 10.0.2 (JSSE)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-OracleJava-6.10.Z:java-1.7.0-oracle-1:1.7.0.191-1jpp.1.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.7.0-oracle-1:1.7.0.191-1jpp.1.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.7.0-oracle-devel-1:1.7.0.191-1jpp.1.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.7.0-oracle-devel-1:1.7.0.191-1jpp.1.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.191-1jpp.1.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.191-1jpp.1.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.191-1jpp.1.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.191-1jpp.1.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.191-1jpp.1.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.191-1jpp.1.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.7.0-oracle-src-1:1.7.0.191-1jpp.1.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.7.0-oracle-src-1:1.7.0.191-1jpp.1.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.7.0-oracle-1:1.7.0.191-1jpp.1.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.7.0-oracle-1:1.7.0.191-1jpp.1.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.7.0-oracle-devel-1:1.7.0.191-1jpp.1.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.7.0-oracle-devel-1:1.7.0.191-1jpp.1.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.191-1jpp.1.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.191-1jpp.1.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.191-1jpp.1.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.191-1jpp.1.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.191-1jpp.1.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.191-1jpp.1.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.7.0-oracle-src-1:1.7.0.191-1jpp.1.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.7.0-oracle-src-1:1.7.0.191-1jpp.1.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.7.0-oracle-1:1.7.0.191-1jpp.1.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.7.0-oracle-1:1.7.0.191-1jpp.1.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.7.0-oracle-devel-1:1.7.0.191-1jpp.1.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.7.0-oracle-devel-1:1.7.0.191-1jpp.1.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.191-1jpp.1.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.191-1jpp.1.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.191-1jpp.1.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.191-1jpp.1.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.191-1jpp.1.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.191-1jpp.1.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.7.0-oracle-src-1:1.7.0.191-1jpp.1.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.7.0-oracle-src-1:1.7.0.191-1jpp.1.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.7.0-oracle-1:1.7.0.191-1jpp.1.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.7.0-oracle-1:1.7.0.191-1jpp.1.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.7.0-oracle-devel-1:1.7.0.191-1jpp.1.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.7.0-oracle-devel-1:1.7.0.191-1jpp.1.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.191-1jpp.1.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.191-1jpp.1.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.191-1jpp.1.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.191-1jpp.1.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.191-1jpp.1.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.191-1jpp.1.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.7.0-oracle-src-1:1.7.0.191-1jpp.1.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.7.0-oracle-src-1:1.7.0.191-1jpp.1.el6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-2973"
},
{
"category": "external",
"summary": "RHBZ#1602145",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1602145"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-2973",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-2973"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2973",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2973"
},
{
"category": "external",
"summary": "http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html#AppendixJAVA",
"url": "http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html#AppendixJAVA"
}
],
"release_date": "2018-07-17T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-07-24T21:13:43+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.",
"product_ids": [
"6Client-OracleJava-6.10.Z:java-1.7.0-oracle-1:1.7.0.191-1jpp.1.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.7.0-oracle-1:1.7.0.191-1jpp.1.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.7.0-oracle-devel-1:1.7.0.191-1jpp.1.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.7.0-oracle-devel-1:1.7.0.191-1jpp.1.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.191-1jpp.1.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.191-1jpp.1.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.191-1jpp.1.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.191-1jpp.1.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.191-1jpp.1.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.191-1jpp.1.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.7.0-oracle-src-1:1.7.0.191-1jpp.1.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.7.0-oracle-src-1:1.7.0.191-1jpp.1.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.7.0-oracle-1:1.7.0.191-1jpp.1.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.7.0-oracle-1:1.7.0.191-1jpp.1.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.7.0-oracle-devel-1:1.7.0.191-1jpp.1.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.7.0-oracle-devel-1:1.7.0.191-1jpp.1.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.191-1jpp.1.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.191-1jpp.1.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.191-1jpp.1.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.191-1jpp.1.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.191-1jpp.1.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.191-1jpp.1.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.7.0-oracle-src-1:1.7.0.191-1jpp.1.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.7.0-oracle-src-1:1.7.0.191-1jpp.1.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.7.0-oracle-1:1.7.0.191-1jpp.1.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.7.0-oracle-1:1.7.0.191-1jpp.1.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.7.0-oracle-devel-1:1.7.0.191-1jpp.1.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.7.0-oracle-devel-1:1.7.0.191-1jpp.1.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.191-1jpp.1.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.191-1jpp.1.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.191-1jpp.1.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.191-1jpp.1.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.191-1jpp.1.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.191-1jpp.1.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.7.0-oracle-src-1:1.7.0.191-1jpp.1.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.7.0-oracle-src-1:1.7.0.191-1jpp.1.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.7.0-oracle-1:1.7.0.191-1jpp.1.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.7.0-oracle-1:1.7.0.191-1jpp.1.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.7.0-oracle-devel-1:1.7.0.191-1jpp.1.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.7.0-oracle-devel-1:1.7.0.191-1jpp.1.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.191-1jpp.1.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.191-1jpp.1.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.191-1jpp.1.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.191-1jpp.1.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.191-1jpp.1.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.191-1jpp.1.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.7.0-oracle-src-1:1.7.0.191-1jpp.1.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.7.0-oracle-src-1:1.7.0.191-1jpp.1.el6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:2255"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.0"
},
"products": [
"6Client-OracleJava-6.10.Z:java-1.7.0-oracle-1:1.7.0.191-1jpp.1.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.7.0-oracle-1:1.7.0.191-1jpp.1.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.7.0-oracle-devel-1:1.7.0.191-1jpp.1.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.7.0-oracle-devel-1:1.7.0.191-1jpp.1.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.191-1jpp.1.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.191-1jpp.1.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.191-1jpp.1.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.191-1jpp.1.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.191-1jpp.1.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.191-1jpp.1.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.7.0-oracle-src-1:1.7.0.191-1jpp.1.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.7.0-oracle-src-1:1.7.0.191-1jpp.1.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.7.0-oracle-1:1.7.0.191-1jpp.1.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.7.0-oracle-1:1.7.0.191-1jpp.1.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.7.0-oracle-devel-1:1.7.0.191-1jpp.1.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.7.0-oracle-devel-1:1.7.0.191-1jpp.1.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.191-1jpp.1.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.191-1jpp.1.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.191-1jpp.1.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.191-1jpp.1.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.191-1jpp.1.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.191-1jpp.1.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.7.0-oracle-src-1:1.7.0.191-1jpp.1.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.7.0-oracle-src-1:1.7.0.191-1jpp.1.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.7.0-oracle-1:1.7.0.191-1jpp.1.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.7.0-oracle-1:1.7.0.191-1jpp.1.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.7.0-oracle-devel-1:1.7.0.191-1jpp.1.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.7.0-oracle-devel-1:1.7.0.191-1jpp.1.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.191-1jpp.1.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.191-1jpp.1.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.191-1jpp.1.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.191-1jpp.1.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.191-1jpp.1.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.191-1jpp.1.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.7.0-oracle-src-1:1.7.0.191-1jpp.1.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.7.0-oracle-src-1:1.7.0.191-1jpp.1.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.7.0-oracle-1:1.7.0.191-1jpp.1.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.7.0-oracle-1:1.7.0.191-1jpp.1.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.7.0-oracle-devel-1:1.7.0.191-1jpp.1.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.7.0-oracle-devel-1:1.7.0.191-1jpp.1.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.191-1jpp.1.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.191-1jpp.1.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.191-1jpp.1.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.191-1jpp.1.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.191-1jpp.1.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.191-1jpp.1.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.7.0-oracle-src-1:1.7.0.191-1jpp.1.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.7.0-oracle-src-1:1.7.0.191-1jpp.1.el6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "JDK: unspecified vulnerability fixed in 6u201, 7u191, 8u181, and 10.0.2 (JSSE)"
}
]
}
rhsa-2018:2713
Vulnerability from csaf_redhat
Published
2018-09-17 14:54
Modified
2025-08-04 11:58
Summary
Red Hat Security Advisory: java-1.8.0-ibm security update
Notes
Topic
An update for java-1.8.0-ibm is now available for Red Hat Satellite 5.8.
Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
IBM Java SE version 8 includes the IBM Java Runtime Environment and the IBM Java Software Development Kit.
This update upgrades IBM Java SE 8 to version 8 SR5-FP20.
Security Fix(es):
* IBM JDK: privilege escalation via insufficiently restricted access to Attach API (CVE-2018-12539)
* openssl: BN_mod_exp may produce incorrect results on x86_64 (CVE-2017-3732)
* openssl: bn_sqrx8x_internal carry bug on x86_64 (CVE-2017-3736)
* IBM JDK: DoS in the java.math component (CVE-2018-1517)
* IBM JDK: path traversal flaw in the Diagnostic Tooling Framework (CVE-2018-1656)
* Oracle JDK: unspecified vulnerability fixed in 6u201, 7u191, 8u181, and 10.0.2 (Libraries) (CVE-2018-2940)
* OpenJDK: insufficient index validation in PatternSyntaxException getMessage() (Concurrency, 8199547) (CVE-2018-2952)
* Oracle JDK: unspecified vulnerability fixed in 6u201, 7u191, 8u181, and 10.0.2 (JSSE) (CVE-2018-2973)
* OpenSSL: Double-free in DSA code (CVE-2016-0705)
For more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section.
Red Hat would like to thank the OpenSSL project for reporting CVE-2016-0705. Upstream acknowledges Adam Langley (Google/BoringSSL) as the original reporter of CVE-2016-0705.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for java-1.8.0-ibm is now available for Red Hat Satellite 5.8.\n\nRed Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "IBM Java SE version 8 includes the IBM Java Runtime Environment and the IBM Java Software Development Kit.\n\nThis update upgrades IBM Java SE 8 to version 8 SR5-FP20.\n\nSecurity Fix(es):\n\n* IBM JDK: privilege escalation via insufficiently restricted access to Attach API (CVE-2018-12539)\n\n* openssl: BN_mod_exp may produce incorrect results on x86_64 (CVE-2017-3732)\n\n* openssl: bn_sqrx8x_internal carry bug on x86_64 (CVE-2017-3736)\n\n* IBM JDK: DoS in the java.math component (CVE-2018-1517)\n\n* IBM JDK: path traversal flaw in the Diagnostic Tooling Framework (CVE-2018-1656)\n\n* Oracle JDK: unspecified vulnerability fixed in 6u201, 7u191, 8u181, and 10.0.2 (Libraries) (CVE-2018-2940)\n\n* OpenJDK: insufficient index validation in PatternSyntaxException getMessage() (Concurrency, 8199547) (CVE-2018-2952)\n\n* Oracle JDK: unspecified vulnerability fixed in 6u201, 7u191, 8u181, and 10.0.2 (JSSE) (CVE-2018-2973)\n\n* OpenSSL: Double-free in DSA code (CVE-2016-0705)\n\nFor more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section.\n\nRed Hat would like to thank the OpenSSL project for reporting CVE-2016-0705. Upstream acknowledges Adam Langley (Google/BoringSSL) as the original reporter of CVE-2016-0705.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2018:2713",
"url": "https://access.redhat.com/errata/RHSA-2018:2713"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#moderate",
"url": "https://access.redhat.com/security/updates/classification/#moderate"
},
{
"category": "external",
"summary": "1310596",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1310596"
},
{
"category": "external",
"summary": "1416856",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1416856"
},
{
"category": "external",
"summary": "1509169",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1509169"
},
{
"category": "external",
"summary": "1600925",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1600925"
},
{
"category": "external",
"summary": "1602145",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1602145"
},
{
"category": "external",
"summary": "1602146",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1602146"
},
{
"category": "external",
"summary": "1618767",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1618767"
},
{
"category": "external",
"summary": "1618869",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1618869"
},
{
"category": "external",
"summary": "1618871",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1618871"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_2713.json"
}
],
"title": "Red Hat Security Advisory: java-1.8.0-ibm security update",
"tracking": {
"current_release_date": "2025-08-04T11:58:46+00:00",
"generator": {
"date": "2025-08-04T11:58:46+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.6.6"
}
},
"id": "RHSA-2018:2713",
"initial_release_date": "2018-09-17T14:54:13+00:00",
"revision_history": [
{
"date": "2018-09-17T14:54:13+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2018-09-17T14:54:13+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2025-08-04T11:58:46+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Satellite 5.8 (RHEL v.6)",
"product": {
"name": "Red Hat Satellite 5.8 (RHEL v.6)",
"product_id": "6Server-Satellite58",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:network_satellite:5.8::el6"
}
}
}
],
"category": "product_family",
"name": "Red Hat Satellite"
},
{
"branches": [
{
"category": "product_version",
"name": "java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"product": {
"name": "java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"product_id": "java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-ibm-devel@1.8.0.5.20-1jpp.1.el6_10?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"product": {
"name": "java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"product_id": "java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-ibm@1.8.0.5.20-1jpp.1.el6_10?arch=x86_64\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"product": {
"name": "java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"product_id": "java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-ibm-devel@1.8.0.5.20-1jpp.1.el6_10?arch=s390x\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"product": {
"name": "java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"product_id": "java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-ibm@1.8.0.5.20-1jpp.1.el6_10?arch=s390x\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "s390x"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x as a component of Red Hat Satellite 5.8 (RHEL v.6)",
"product_id": "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x"
},
"product_reference": "java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"relates_to_product_reference": "6Server-Satellite58"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64 as a component of Red Hat Satellite 5.8 (RHEL v.6)",
"product_id": "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64"
},
"product_reference": "java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"relates_to_product_reference": "6Server-Satellite58"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x as a component of Red Hat Satellite 5.8 (RHEL v.6)",
"product_id": "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x"
},
"product_reference": "java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"relates_to_product_reference": "6Server-Satellite58"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64 as a component of Red Hat Satellite 5.8 (RHEL v.6)",
"product_id": "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64"
},
"product_reference": "java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"relates_to_product_reference": "6Server-Satellite58"
}
]
},
"vulnerabilities": [
{
"acknowledgments": [
{
"names": [
"the OpenSSL project"
]
},
{
"names": [
"Adam Langley"
],
"organization": "Google/BoringSSL",
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2016-0705",
"discovery_date": "2016-02-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1310596"
}
],
"notes": [
{
"category": "description",
"text": "A double-free flaw was found in the way OpenSSL parsed certain malformed DSA (Digital Signature Algorithm) private keys. An attacker could create specially crafted DSA private keys that, when processed by an application compiled against OpenSSL, could cause the application to crash.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenSSL: Double-free in DSA code",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-0705"
},
{
"category": "external",
"summary": "RHBZ#1310596",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1310596"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-0705",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-0705"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-0705",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-0705"
}
],
"release_date": "2016-02-18T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-09-17T14:54:13+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nFor this update to take effect, Red Hat Satellite must be restarted (\"/usr/sbin/rhn-satellite restart\"). All running instances of IBM Java must be restarted for this update to take effect.",
"product_ids": [
"6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:2713"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "HIGH",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 2.6,
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:H/Au:N/C:N/I:N/A:P",
"version": "2.0"
},
"products": [
"6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "OpenSSL: Double-free in DSA code"
},
{
"cve": "CVE-2017-3732",
"discovery_date": "2017-01-26T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1416856"
}
],
"notes": [
{
"category": "description",
"text": "There is a carry propagating bug in the x86_64 Montgomery squaring procedure in OpenSSL 1.0.2 before 1.0.2k and 1.1.0 before 1.1.0d. No EC algorithms are affected. Analysis suggests that attacks against RSA and DSA as a result of this defect would be very difficult to perform and are not believed likely. Attacks against DH are considered just feasible (although very difficult) because most of the work necessary to deduce information about a private key may be performed offline. The amount of resources required for such an attack would be very significant and likely only accessible to a limited number of attackers. An attacker would additionally need online access to an unpatched system using the target private key in a scenario with persistent DH parameters and a private key that is shared between multiple clients. For example this can occur by default in OpenSSL DHE based SSL/TLS ciphersuites. Note: This issue is very similar to CVE-2015-3193 but must be treated as a separate problem.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "openssl: BN_mod_exp may produce incorrect results on x86_64",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2017-3732"
},
{
"category": "external",
"summary": "RHBZ#1416856",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1416856"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2017-3732",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-3732"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-3732",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2017-3732"
},
{
"category": "external",
"summary": "https://www.openssl.org/news/secadv/20170126.txt",
"url": "https://www.openssl.org/news/secadv/20170126.txt"
}
],
"release_date": "2017-01-26T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-09-17T14:54:13+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nFor this update to take effect, Red Hat Satellite must be restarted (\"/usr/sbin/rhn-satellite restart\"). All running instances of IBM Java must be restarted for this update to take effect.",
"product_ids": [
"6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:2713"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "openssl: BN_mod_exp may produce incorrect results on x86_64"
},
{
"cve": "CVE-2017-3736",
"cwe": {
"id": "CWE-682",
"name": "Incorrect Calculation"
},
"discovery_date": "2017-11-02T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1509169"
}
],
"notes": [
{
"category": "description",
"text": "There is a carry propagating bug in the x86_64 Montgomery squaring procedure in OpenSSL before 1.0.2m and 1.1.0 before 1.1.0g. No EC algorithms are affected. Analysis suggests that attacks against RSA and DSA as a result of this defect would be very difficult to perform and are not believed likely. Attacks against DH are considered just feasible (although very difficult) because most of the work necessary to deduce information about a private key may be performed offline. The amount of resources required for such an attack would be very significant and likely only accessible to a limited number of attackers. An attacker would additionally need online access to an unpatched system using the target private key in a scenario with persistent DH parameters and a private key that is shared between multiple clients. This only affects processors that support the BMI1, BMI2 and ADX extensions like Intel Broadwell (5th generation) and later or AMD Ryzen.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "openssl: bn_sqrx8x_internal carry bug on x86_64",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2017-3736"
},
{
"category": "external",
"summary": "RHBZ#1509169",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1509169"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2017-3736",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-3736"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-3736",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2017-3736"
},
{
"category": "external",
"summary": "https://www.openssl.org/news/secadv/20171102.txt",
"url": "https://www.openssl.org/news/secadv/20171102.txt"
}
],
"release_date": "2017-11-02T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-09-17T14:54:13+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nFor this update to take effect, Red Hat Satellite must be restarted (\"/usr/sbin/rhn-satellite restart\"). All running instances of IBM Java must be restarted for this update to take effect.",
"product_ids": [
"6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:2713"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "openssl: bn_sqrx8x_internal carry bug on x86_64"
},
{
"cve": "CVE-2018-1517",
"discovery_date": "2018-08-16T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1618871"
}
],
"notes": [
{
"category": "description",
"text": "A flaw in the java.math component in IBM SDK, Java Technology Edition 6.0, 7.0, and 8.0 may allow an attacker to inflict a denial-of-service attack with specially crafted String data. IBM X-Force ID: 141681.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "JDK: DoS in the java.math component",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-1517"
},
{
"category": "external",
"summary": "RHBZ#1618871",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1618871"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-1517",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-1517"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-1517",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-1517"
}
],
"release_date": "2018-08-16T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-09-17T14:54:13+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nFor this update to take effect, Red Hat Satellite must be restarted (\"/usr/sbin/rhn-satellite restart\"). All running instances of IBM Java must be restarted for this update to take effect.",
"product_ids": [
"6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:2713"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "JDK: DoS in the java.math component"
},
{
"cve": "CVE-2018-1656",
"cwe": {
"id": "CWE-22",
"name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)"
},
"discovery_date": "2018-08-16T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1618869"
}
],
"notes": [
{
"category": "description",
"text": "The IBM Java Runtime Environment\u0027s Diagnostic Tooling Framework for Java (DTFJ) (IBM SDK, Java Technology Edition 6.0 , 7.0, and 8.0) does not protect against path traversal attacks when extracting compressed dump files. IBM X-Force ID: 144882.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "JDK: path traversal flaw in the Diagnostic Tooling Framework",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-1656"
},
{
"category": "external",
"summary": "RHBZ#1618869",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1618869"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-1656",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-1656"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-1656",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-1656"
}
],
"release_date": "2018-08-16T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-09-17T14:54:13+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nFor this update to take effect, Red Hat Satellite must be restarted (\"/usr/sbin/rhn-satellite restart\"). All running instances of IBM Java must be restarted for this update to take effect.",
"product_ids": [
"6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:2713"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.0"
},
"products": [
"6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "JDK: path traversal flaw in the Diagnostic Tooling Framework"
},
{
"cve": "CVE-2018-2940",
"discovery_date": "2018-07-17T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1602146"
}
],
"notes": [
{
"category": "description",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries). Supported versions that are affected are Java SE: 6u191, 7u181, 8u172 and 10.0.1; Java SE Embedded: 8u171. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 4.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "JDK: unspecified vulnerability fixed in 6u201, 7u191, 8u181, and 10.0.2 (Libraries)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-2940"
},
{
"category": "external",
"summary": "RHBZ#1602146",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1602146"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-2940",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-2940"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2940",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2940"
},
{
"category": "external",
"summary": "http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html#AppendixJAVA",
"url": "http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html#AppendixJAVA"
}
],
"release_date": "2018-07-17T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-09-17T14:54:13+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nFor this update to take effect, Red Hat Satellite must be restarted (\"/usr/sbin/rhn-satellite restart\"). All running instances of IBM Java must be restarted for this update to take effect.",
"product_ids": [
"6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:2713"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "JDK: unspecified vulnerability fixed in 6u201, 7u191, 8u181, and 10.0.2 (Libraries)"
},
{
"cve": "CVE-2018-2952",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2018-07-11T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1600925"
}
],
"notes": [
{
"category": "description",
"text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Concurrency). Supported versions that are affected are Java SE: 6u191, 7u181, 8u172 and 10.0.1; Java SE Embedded: 8u171; JRockit: R28.3.18. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 3.7 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK: insufficient index validation in PatternSyntaxException getMessage() (Concurrency, 8199547)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-2952"
},
{
"category": "external",
"summary": "RHBZ#1600925",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1600925"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-2952",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-2952"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2952",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2952"
}
],
"release_date": "2018-07-17T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-09-17T14:54:13+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nFor this update to take effect, Red Hat Satellite must be restarted (\"/usr/sbin/rhn-satellite restart\"). All running instances of IBM Java must be restarted for this update to take effect.",
"product_ids": [
"6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:2713"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 3.7,
"baseSeverity": "LOW",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "OpenJDK: insufficient index validation in PatternSyntaxException getMessage() (Concurrency, 8199547)"
},
{
"cve": "CVE-2018-2973",
"discovery_date": "2018-07-17T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1602145"
}
],
"notes": [
{
"category": "description",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: JSSE). Supported versions that are affected are Java SE: 6u191, 7u181, 8u172 and 10.0.1; Java SE Embedded: 8u171. Difficult to exploit vulnerability allows unauthenticated attacker with network access via SSL/TLS to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 5.9 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "JDK: unspecified vulnerability fixed in 6u201, 7u191, 8u181, and 10.0.2 (JSSE)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-2973"
},
{
"category": "external",
"summary": "RHBZ#1602145",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1602145"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-2973",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-2973"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2973",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2973"
},
{
"category": "external",
"summary": "http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html#AppendixJAVA",
"url": "http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html#AppendixJAVA"
}
],
"release_date": "2018-07-17T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-09-17T14:54:13+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nFor this update to take effect, Red Hat Satellite must be restarted (\"/usr/sbin/rhn-satellite restart\"). All running instances of IBM Java must be restarted for this update to take effect.",
"product_ids": [
"6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:2713"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.0"
},
"products": [
"6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "JDK: unspecified vulnerability fixed in 6u201, 7u191, 8u181, and 10.0.2 (JSSE)"
},
{
"cve": "CVE-2018-12539",
"cwe": {
"id": "CWE-287",
"name": "Improper Authentication"
},
"discovery_date": "2018-08-16T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1618767"
}
],
"notes": [
{
"category": "description",
"text": "In Eclipse OpenJ9 version 0.8, users other than the process owner may be able to use Java Attach API to connect to an Eclipse OpenJ9 or IBM JVM on the same machine and use Attach API operations, which includes the ability to execute untrusted native code. Attach API is enabled by default on Windows, Linux and AIX JVMs and can be disabled using the command line option -Dcom.ibm.tools.attach.enable=no.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "JDK: privilege escalation via insufficiently restricted access to Attach API",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-12539"
},
{
"category": "external",
"summary": "RHBZ#1618767",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1618767"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-12539",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-12539"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-12539",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-12539"
}
],
"release_date": "2018-05-11T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-09-17T14:54:13+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nFor this update to take effect, Red Hat Satellite must be restarted (\"/usr/sbin/rhn-satellite restart\"). All running instances of IBM Java must be restarted for this update to take effect.",
"product_ids": [
"6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:2713"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 8.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "JDK: privilege escalation via insufficiently restricted access to Attach API"
}
]
}
rhsa-2018:2569
Vulnerability from csaf_redhat
Published
2018-08-27 14:21
Modified
2025-08-03 22:19
Summary
Red Hat Security Advisory: java-1.7.1-ibm security update
Notes
Topic
An update for java-1.7.1-ibm is now available for Red Hat Enterprise Linux 7 Supplementary.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
IBM Java SE version 7 Release 1 includes the IBM Java Runtime Environment and the IBM Java Software Development Kit.
This update upgrades IBM Java SE 7 to version 7R1 SR4-FP30.
Security Fix(es):
* IBM JDK: privilege escalation via insufficiently restricted access to Attach API (CVE-2018-12539)
* IBM JDK: DoS in the java.math component (CVE-2018-1517)
* IBM JDK: path traversal flaw in the Diagnostic Tooling Framework (CVE-2018-1656)
* Oracle JDK: unspecified vulnerability fixed in 6u201, 7u191, 8u181, and 10.0.2 (Libraries) (CVE-2018-2940)
* OpenJDK: insufficient index validation in PatternSyntaxException getMessage() (Concurrency, 8199547) (CVE-2018-2952)
* Oracle JDK: unspecified vulnerability fixed in 6u201, 7u191, 8u181, and 10.0.2 (JSSE) (CVE-2018-2973)
For more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for java-1.7.1-ibm is now available for Red Hat Enterprise Linux 7 Supplementary.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "IBM Java SE version 7 Release 1 includes the IBM Java Runtime Environment and the IBM Java Software Development Kit.\n\nThis update upgrades IBM Java SE 7 to version 7R1 SR4-FP30.\n\nSecurity Fix(es):\n\n* IBM JDK: privilege escalation via insufficiently restricted access to Attach API (CVE-2018-12539)\n\n* IBM JDK: DoS in the java.math component (CVE-2018-1517)\n\n* IBM JDK: path traversal flaw in the Diagnostic Tooling Framework (CVE-2018-1656)\n\n* Oracle JDK: unspecified vulnerability fixed in 6u201, 7u191, 8u181, and 10.0.2 (Libraries) (CVE-2018-2940)\n\n* OpenJDK: insufficient index validation in PatternSyntaxException getMessage() (Concurrency, 8199547) (CVE-2018-2952)\n\n* Oracle JDK: unspecified vulnerability fixed in 6u201, 7u191, 8u181, and 10.0.2 (JSSE) (CVE-2018-2973)\n\nFor more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2018:2569",
"url": "https://access.redhat.com/errata/RHSA-2018:2569"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "1600925",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1600925"
},
{
"category": "external",
"summary": "1602145",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1602145"
},
{
"category": "external",
"summary": "1602146",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1602146"
},
{
"category": "external",
"summary": "1618767",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1618767"
},
{
"category": "external",
"summary": "1618869",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1618869"
},
{
"category": "external",
"summary": "1618871",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1618871"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_2569.json"
}
],
"title": "Red Hat Security Advisory: java-1.7.1-ibm security update",
"tracking": {
"current_release_date": "2025-08-03T22:19:46+00:00",
"generator": {
"date": "2025-08-03T22:19:46+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.6.6"
}
},
"id": "RHSA-2018:2569",
"initial_release_date": "2018-08-27T14:21:31+00:00",
"revision_history": [
{
"date": "2018-08-27T14:21:31+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2018-08-27T14:21:31+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2025-08-03T22:19:46+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Client Supplementary (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux Client Supplementary (v. 7)",
"product_id": "7Client-7.5.Z-Client",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras:7"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)",
"product_id": "7ComputeNode-7.5.Z-ComputeNode",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras:7"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Server Supplementary (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux Server Supplementary (v. 7)",
"product_id": "7Server-7.5.Z-Server",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras:7"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Workstation Supplementary (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux Workstation Supplementary (v. 7)",
"product_id": "7Workstation-7.5.Z-Workstation",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras:7"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux Supplementary"
},
{
"branches": [
{
"category": "product_version",
"name": "java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"product": {
"name": "java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"product_id": "java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.7.1-ibm-src@1.7.1.4.30-1jpp.1.el7?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"product": {
"name": "java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"product_id": "java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.7.1-ibm-devel@1.7.1.4.30-1jpp.1.el7?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"product": {
"name": "java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"product_id": "java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.7.1-ibm@1.7.1.4.30-1jpp.1.el7?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"product": {
"name": "java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"product_id": "java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.7.1-ibm-demo@1.7.1.4.30-1jpp.1.el7?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.7.1-ibm-plugin-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"product": {
"name": "java-1.7.1-ibm-plugin-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"product_id": "java-1.7.1-ibm-plugin-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.7.1-ibm-plugin@1.7.1.4.30-1jpp.1.el7?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"product": {
"name": "java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"product_id": "java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.7.1-ibm-jdbc@1.7.1.4.30-1jpp.1.el7?arch=x86_64\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.s390x",
"product": {
"name": "java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.s390x",
"product_id": "java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.7.1-ibm-src@1.7.1.4.30-1jpp.1.el7?arch=s390x\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.s390x",
"product": {
"name": "java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.s390x",
"product_id": "java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.7.1-ibm@1.7.1.4.30-1jpp.1.el7?arch=s390x\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.s390x",
"product": {
"name": "java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.s390x",
"product_id": "java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.7.1-ibm-jdbc@1.7.1.4.30-1jpp.1.el7?arch=s390x\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.s390x",
"product": {
"name": "java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.s390x",
"product_id": "java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.7.1-ibm-devel@1.7.1.4.30-1jpp.1.el7?arch=s390x\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.s390x",
"product": {
"name": "java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.s390x",
"product_id": "java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.7.1-ibm-demo@1.7.1.4.30-1jpp.1.el7?arch=s390x\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"product": {
"name": "java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"product_id": "java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.7.1-ibm-src@1.7.1.4.30-1jpp.1.el7?arch=ppc64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"product": {
"name": "java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"product_id": "java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.7.1-ibm@1.7.1.4.30-1jpp.1.el7?arch=ppc64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"product": {
"name": "java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"product_id": "java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.7.1-ibm-jdbc@1.7.1.4.30-1jpp.1.el7?arch=ppc64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"product": {
"name": "java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"product_id": "java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.7.1-ibm-devel@1.7.1.4.30-1jpp.1.el7?arch=ppc64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"product": {
"name": "java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"product_id": "java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.7.1-ibm-demo@1.7.1.4.30-1jpp.1.el7?arch=ppc64\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "ppc64"
},
{
"branches": [
{
"category": "product_version",
"name": "java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"product": {
"name": "java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"product_id": "java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.7.1-ibm-src@1.7.1.4.30-1jpp.1.el7?arch=ppc64le\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"product": {
"name": "java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"product_id": "java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.7.1-ibm@1.7.1.4.30-1jpp.1.el7?arch=ppc64le\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"product": {
"name": "java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"product_id": "java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.7.1-ibm-jdbc@1.7.1.4.30-1jpp.1.el7?arch=ppc64le\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"product": {
"name": "java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"product_id": "java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.7.1-ibm-devel@1.7.1.4.30-1jpp.1.el7?arch=ppc64le\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"product": {
"name": "java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"product_id": "java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.7.1-ibm-demo@1.7.1.4.30-1jpp.1.el7?arch=ppc64le\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.ppc64 as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)",
"product_id": "7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.ppc64"
},
"product_reference": "java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"relates_to_product_reference": "7Client-7.5.Z-Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.ppc64le as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)",
"product_id": "7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.ppc64le"
},
"product_reference": "java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"relates_to_product_reference": "7Client-7.5.Z-Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.s390x as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)",
"product_id": "7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.s390x"
},
"product_reference": "java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.s390x",
"relates_to_product_reference": "7Client-7.5.Z-Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.x86_64 as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)",
"product_id": "7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.x86_64"
},
"product_reference": "java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"relates_to_product_reference": "7Client-7.5.Z-Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.ppc64 as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)",
"product_id": "7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.ppc64"
},
"product_reference": "java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"relates_to_product_reference": "7Client-7.5.Z-Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.ppc64le as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)",
"product_id": "7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.ppc64le"
},
"product_reference": "java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"relates_to_product_reference": "7Client-7.5.Z-Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.s390x as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)",
"product_id": "7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.s390x"
},
"product_reference": "java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.s390x",
"relates_to_product_reference": "7Client-7.5.Z-Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.x86_64 as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)",
"product_id": "7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.x86_64"
},
"product_reference": "java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"relates_to_product_reference": "7Client-7.5.Z-Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.ppc64 as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)",
"product_id": "7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.ppc64"
},
"product_reference": "java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"relates_to_product_reference": "7Client-7.5.Z-Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.ppc64le as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)",
"product_id": "7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.ppc64le"
},
"product_reference": "java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"relates_to_product_reference": "7Client-7.5.Z-Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.s390x as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)",
"product_id": "7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.s390x"
},
"product_reference": "java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.s390x",
"relates_to_product_reference": "7Client-7.5.Z-Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.x86_64 as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)",
"product_id": "7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.x86_64"
},
"product_reference": "java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"relates_to_product_reference": "7Client-7.5.Z-Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.ppc64 as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)",
"product_id": "7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.ppc64"
},
"product_reference": "java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"relates_to_product_reference": "7Client-7.5.Z-Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.ppc64le as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)",
"product_id": "7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.ppc64le"
},
"product_reference": "java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"relates_to_product_reference": "7Client-7.5.Z-Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.s390x as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)",
"product_id": "7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.s390x"
},
"product_reference": "java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.s390x",
"relates_to_product_reference": "7Client-7.5.Z-Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.x86_64 as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)",
"product_id": "7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.x86_64"
},
"product_reference": "java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"relates_to_product_reference": "7Client-7.5.Z-Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-plugin-1:1.7.1.4.30-1jpp.1.el7.x86_64 as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)",
"product_id": "7Client-7.5.Z-Client:java-1.7.1-ibm-plugin-1:1.7.1.4.30-1jpp.1.el7.x86_64"
},
"product_reference": "java-1.7.1-ibm-plugin-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"relates_to_product_reference": "7Client-7.5.Z-Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.ppc64 as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)",
"product_id": "7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.ppc64"
},
"product_reference": "java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"relates_to_product_reference": "7Client-7.5.Z-Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.ppc64le as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)",
"product_id": "7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.ppc64le"
},
"product_reference": "java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"relates_to_product_reference": "7Client-7.5.Z-Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.s390x as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)",
"product_id": "7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.s390x"
},
"product_reference": "java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.s390x",
"relates_to_product_reference": "7Client-7.5.Z-Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.x86_64 as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)",
"product_id": "7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.x86_64"
},
"product_reference": "java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"relates_to_product_reference": "7Client-7.5.Z-Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.ppc64 as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)",
"product_id": "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.ppc64"
},
"product_reference": "java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"relates_to_product_reference": "7ComputeNode-7.5.Z-ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.ppc64le as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)",
"product_id": "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.ppc64le"
},
"product_reference": "java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"relates_to_product_reference": "7ComputeNode-7.5.Z-ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.s390x as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)",
"product_id": "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.s390x"
},
"product_reference": "java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.s390x",
"relates_to_product_reference": "7ComputeNode-7.5.Z-ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)",
"product_id": "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.x86_64"
},
"product_reference": "java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"relates_to_product_reference": "7ComputeNode-7.5.Z-ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.ppc64 as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)",
"product_id": "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.ppc64"
},
"product_reference": "java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"relates_to_product_reference": "7ComputeNode-7.5.Z-ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.ppc64le as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)",
"product_id": "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.ppc64le"
},
"product_reference": "java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"relates_to_product_reference": "7ComputeNode-7.5.Z-ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.s390x as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)",
"product_id": "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.s390x"
},
"product_reference": "java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.s390x",
"relates_to_product_reference": "7ComputeNode-7.5.Z-ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)",
"product_id": "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.x86_64"
},
"product_reference": "java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"relates_to_product_reference": "7ComputeNode-7.5.Z-ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.ppc64 as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)",
"product_id": "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.ppc64"
},
"product_reference": "java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"relates_to_product_reference": "7ComputeNode-7.5.Z-ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.ppc64le as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)",
"product_id": "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.ppc64le"
},
"product_reference": "java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"relates_to_product_reference": "7ComputeNode-7.5.Z-ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.s390x as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)",
"product_id": "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.s390x"
},
"product_reference": "java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.s390x",
"relates_to_product_reference": "7ComputeNode-7.5.Z-ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)",
"product_id": "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.x86_64"
},
"product_reference": "java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"relates_to_product_reference": "7ComputeNode-7.5.Z-ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.ppc64 as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)",
"product_id": "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.ppc64"
},
"product_reference": "java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"relates_to_product_reference": "7ComputeNode-7.5.Z-ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.ppc64le as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)",
"product_id": "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.ppc64le"
},
"product_reference": "java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"relates_to_product_reference": "7ComputeNode-7.5.Z-ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.s390x as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)",
"product_id": "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.s390x"
},
"product_reference": "java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.s390x",
"relates_to_product_reference": "7ComputeNode-7.5.Z-ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)",
"product_id": "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.x86_64"
},
"product_reference": "java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"relates_to_product_reference": "7ComputeNode-7.5.Z-ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-plugin-1:1.7.1.4.30-1jpp.1.el7.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)",
"product_id": "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-plugin-1:1.7.1.4.30-1jpp.1.el7.x86_64"
},
"product_reference": "java-1.7.1-ibm-plugin-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"relates_to_product_reference": "7ComputeNode-7.5.Z-ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.ppc64 as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)",
"product_id": "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.ppc64"
},
"product_reference": "java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"relates_to_product_reference": "7ComputeNode-7.5.Z-ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.ppc64le as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)",
"product_id": "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.ppc64le"
},
"product_reference": "java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"relates_to_product_reference": "7ComputeNode-7.5.Z-ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.s390x as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)",
"product_id": "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.s390x"
},
"product_reference": "java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.s390x",
"relates_to_product_reference": "7ComputeNode-7.5.Z-ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)",
"product_id": "7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.x86_64"
},
"product_reference": "java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"relates_to_product_reference": "7ComputeNode-7.5.Z-ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.ppc64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)",
"product_id": "7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.ppc64"
},
"product_reference": "java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"relates_to_product_reference": "7Server-7.5.Z-Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.ppc64le as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)",
"product_id": "7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.ppc64le"
},
"product_reference": "java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"relates_to_product_reference": "7Server-7.5.Z-Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.s390x as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)",
"product_id": "7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.s390x"
},
"product_reference": "java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.s390x",
"relates_to_product_reference": "7Server-7.5.Z-Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)",
"product_id": "7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.x86_64"
},
"product_reference": "java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"relates_to_product_reference": "7Server-7.5.Z-Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.ppc64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)",
"product_id": "7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.ppc64"
},
"product_reference": "java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"relates_to_product_reference": "7Server-7.5.Z-Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.ppc64le as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)",
"product_id": "7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.ppc64le"
},
"product_reference": "java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"relates_to_product_reference": "7Server-7.5.Z-Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.s390x as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)",
"product_id": "7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.s390x"
},
"product_reference": "java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.s390x",
"relates_to_product_reference": "7Server-7.5.Z-Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)",
"product_id": "7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.x86_64"
},
"product_reference": "java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"relates_to_product_reference": "7Server-7.5.Z-Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.ppc64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)",
"product_id": "7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.ppc64"
},
"product_reference": "java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"relates_to_product_reference": "7Server-7.5.Z-Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.ppc64le as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)",
"product_id": "7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.ppc64le"
},
"product_reference": "java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"relates_to_product_reference": "7Server-7.5.Z-Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.s390x as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)",
"product_id": "7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.s390x"
},
"product_reference": "java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.s390x",
"relates_to_product_reference": "7Server-7.5.Z-Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)",
"product_id": "7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.x86_64"
},
"product_reference": "java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"relates_to_product_reference": "7Server-7.5.Z-Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.ppc64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)",
"product_id": "7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.ppc64"
},
"product_reference": "java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"relates_to_product_reference": "7Server-7.5.Z-Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.ppc64le as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)",
"product_id": "7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.ppc64le"
},
"product_reference": "java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"relates_to_product_reference": "7Server-7.5.Z-Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.s390x as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)",
"product_id": "7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.s390x"
},
"product_reference": "java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.s390x",
"relates_to_product_reference": "7Server-7.5.Z-Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)",
"product_id": "7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.x86_64"
},
"product_reference": "java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"relates_to_product_reference": "7Server-7.5.Z-Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-plugin-1:1.7.1.4.30-1jpp.1.el7.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)",
"product_id": "7Server-7.5.Z-Server:java-1.7.1-ibm-plugin-1:1.7.1.4.30-1jpp.1.el7.x86_64"
},
"product_reference": "java-1.7.1-ibm-plugin-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"relates_to_product_reference": "7Server-7.5.Z-Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.ppc64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)",
"product_id": "7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.ppc64"
},
"product_reference": "java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"relates_to_product_reference": "7Server-7.5.Z-Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.ppc64le as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)",
"product_id": "7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.ppc64le"
},
"product_reference": "java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"relates_to_product_reference": "7Server-7.5.Z-Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.s390x as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)",
"product_id": "7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.s390x"
},
"product_reference": "java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.s390x",
"relates_to_product_reference": "7Server-7.5.Z-Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)",
"product_id": "7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.x86_64"
},
"product_reference": "java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"relates_to_product_reference": "7Server-7.5.Z-Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.ppc64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)",
"product_id": "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.ppc64"
},
"product_reference": "java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"relates_to_product_reference": "7Workstation-7.5.Z-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.ppc64le as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)",
"product_id": "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.ppc64le"
},
"product_reference": "java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"relates_to_product_reference": "7Workstation-7.5.Z-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.s390x as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)",
"product_id": "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.s390x"
},
"product_reference": "java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.s390x",
"relates_to_product_reference": "7Workstation-7.5.Z-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)",
"product_id": "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.x86_64"
},
"product_reference": "java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"relates_to_product_reference": "7Workstation-7.5.Z-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.ppc64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)",
"product_id": "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.ppc64"
},
"product_reference": "java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"relates_to_product_reference": "7Workstation-7.5.Z-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.ppc64le as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)",
"product_id": "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.ppc64le"
},
"product_reference": "java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"relates_to_product_reference": "7Workstation-7.5.Z-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.s390x as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)",
"product_id": "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.s390x"
},
"product_reference": "java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.s390x",
"relates_to_product_reference": "7Workstation-7.5.Z-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)",
"product_id": "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.x86_64"
},
"product_reference": "java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"relates_to_product_reference": "7Workstation-7.5.Z-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.ppc64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)",
"product_id": "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.ppc64"
},
"product_reference": "java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"relates_to_product_reference": "7Workstation-7.5.Z-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.ppc64le as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)",
"product_id": "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.ppc64le"
},
"product_reference": "java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"relates_to_product_reference": "7Workstation-7.5.Z-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.s390x as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)",
"product_id": "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.s390x"
},
"product_reference": "java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.s390x",
"relates_to_product_reference": "7Workstation-7.5.Z-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)",
"product_id": "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.x86_64"
},
"product_reference": "java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"relates_to_product_reference": "7Workstation-7.5.Z-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.ppc64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)",
"product_id": "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.ppc64"
},
"product_reference": "java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"relates_to_product_reference": "7Workstation-7.5.Z-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.ppc64le as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)",
"product_id": "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.ppc64le"
},
"product_reference": "java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"relates_to_product_reference": "7Workstation-7.5.Z-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.s390x as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)",
"product_id": "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.s390x"
},
"product_reference": "java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.s390x",
"relates_to_product_reference": "7Workstation-7.5.Z-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)",
"product_id": "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.x86_64"
},
"product_reference": "java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"relates_to_product_reference": "7Workstation-7.5.Z-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-plugin-1:1.7.1.4.30-1jpp.1.el7.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)",
"product_id": "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-plugin-1:1.7.1.4.30-1jpp.1.el7.x86_64"
},
"product_reference": "java-1.7.1-ibm-plugin-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"relates_to_product_reference": "7Workstation-7.5.Z-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.ppc64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)",
"product_id": "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.ppc64"
},
"product_reference": "java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"relates_to_product_reference": "7Workstation-7.5.Z-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.ppc64le as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)",
"product_id": "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.ppc64le"
},
"product_reference": "java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"relates_to_product_reference": "7Workstation-7.5.Z-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.s390x as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)",
"product_id": "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.s390x"
},
"product_reference": "java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.s390x",
"relates_to_product_reference": "7Workstation-7.5.Z-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)",
"product_id": "7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.x86_64"
},
"product_reference": "java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"relates_to_product_reference": "7Workstation-7.5.Z-Workstation"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2018-1517",
"discovery_date": "2018-08-16T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1618871"
}
],
"notes": [
{
"category": "description",
"text": "A flaw in the java.math component in IBM SDK, Java Technology Edition 6.0, 7.0, and 8.0 may allow an attacker to inflict a denial-of-service attack with specially crafted String data. IBM X-Force ID: 141681.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "JDK: DoS in the java.math component",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-plugin-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-plugin-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-plugin-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-plugin-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-1517"
},
{
"category": "external",
"summary": "RHBZ#1618871",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1618871"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-1517",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-1517"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-1517",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-1517"
}
],
"release_date": "2018-08-16T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-08-27T14:21:31+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of IBM Java must be restarted for this update to take effect.",
"product_ids": [
"7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-plugin-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-plugin-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-plugin-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-plugin-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:2569"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-plugin-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-plugin-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-plugin-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-plugin-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "JDK: DoS in the java.math component"
},
{
"cve": "CVE-2018-1656",
"cwe": {
"id": "CWE-22",
"name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)"
},
"discovery_date": "2018-08-16T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1618869"
}
],
"notes": [
{
"category": "description",
"text": "The IBM Java Runtime Environment\u0027s Diagnostic Tooling Framework for Java (DTFJ) (IBM SDK, Java Technology Edition 6.0 , 7.0, and 8.0) does not protect against path traversal attacks when extracting compressed dump files. IBM X-Force ID: 144882.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "JDK: path traversal flaw in the Diagnostic Tooling Framework",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-plugin-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-plugin-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-plugin-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-plugin-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-1656"
},
{
"category": "external",
"summary": "RHBZ#1618869",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1618869"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-1656",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-1656"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-1656",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-1656"
}
],
"release_date": "2018-08-16T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-08-27T14:21:31+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of IBM Java must be restarted for this update to take effect.",
"product_ids": [
"7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-plugin-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-plugin-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-plugin-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-plugin-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:2569"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.0"
},
"products": [
"7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-plugin-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-plugin-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-plugin-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-plugin-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "JDK: path traversal flaw in the Diagnostic Tooling Framework"
},
{
"cve": "CVE-2018-2940",
"discovery_date": "2018-07-17T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1602146"
}
],
"notes": [
{
"category": "description",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries). Supported versions that are affected are Java SE: 6u191, 7u181, 8u172 and 10.0.1; Java SE Embedded: 8u171. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 4.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "JDK: unspecified vulnerability fixed in 6u201, 7u191, 8u181, and 10.0.2 (Libraries)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-plugin-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-plugin-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-plugin-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-plugin-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-2940"
},
{
"category": "external",
"summary": "RHBZ#1602146",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1602146"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-2940",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-2940"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2940",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2940"
},
{
"category": "external",
"summary": "http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html#AppendixJAVA",
"url": "http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html#AppendixJAVA"
}
],
"release_date": "2018-07-17T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-08-27T14:21:31+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of IBM Java must be restarted for this update to take effect.",
"product_ids": [
"7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-plugin-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-plugin-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-plugin-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-plugin-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:2569"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-plugin-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-plugin-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-plugin-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-plugin-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "JDK: unspecified vulnerability fixed in 6u201, 7u191, 8u181, and 10.0.2 (Libraries)"
},
{
"cve": "CVE-2018-2952",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2018-07-11T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1600925"
}
],
"notes": [
{
"category": "description",
"text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Concurrency). Supported versions that are affected are Java SE: 6u191, 7u181, 8u172 and 10.0.1; Java SE Embedded: 8u171; JRockit: R28.3.18. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 3.7 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK: insufficient index validation in PatternSyntaxException getMessage() (Concurrency, 8199547)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-plugin-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-plugin-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-plugin-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-plugin-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-2952"
},
{
"category": "external",
"summary": "RHBZ#1600925",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1600925"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-2952",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-2952"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2952",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2952"
}
],
"release_date": "2018-07-17T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-08-27T14:21:31+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of IBM Java must be restarted for this update to take effect.",
"product_ids": [
"7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-plugin-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-plugin-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-plugin-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-plugin-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:2569"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 3.7,
"baseSeverity": "LOW",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-plugin-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-plugin-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-plugin-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-plugin-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "OpenJDK: insufficient index validation in PatternSyntaxException getMessage() (Concurrency, 8199547)"
},
{
"cve": "CVE-2018-2973",
"discovery_date": "2018-07-17T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1602145"
}
],
"notes": [
{
"category": "description",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: JSSE). Supported versions that are affected are Java SE: 6u191, 7u181, 8u172 and 10.0.1; Java SE Embedded: 8u171. Difficult to exploit vulnerability allows unauthenticated attacker with network access via SSL/TLS to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 5.9 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "JDK: unspecified vulnerability fixed in 6u201, 7u191, 8u181, and 10.0.2 (JSSE)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-plugin-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-plugin-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-plugin-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-plugin-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-2973"
},
{
"category": "external",
"summary": "RHBZ#1602145",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1602145"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-2973",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-2973"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2973",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2973"
},
{
"category": "external",
"summary": "http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html#AppendixJAVA",
"url": "http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html#AppendixJAVA"
}
],
"release_date": "2018-07-17T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-08-27T14:21:31+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of IBM Java must be restarted for this update to take effect.",
"product_ids": [
"7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-plugin-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-plugin-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-plugin-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-plugin-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:2569"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.0"
},
"products": [
"7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-plugin-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-plugin-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-plugin-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-plugin-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "JDK: unspecified vulnerability fixed in 6u201, 7u191, 8u181, and 10.0.2 (JSSE)"
},
{
"cve": "CVE-2018-12539",
"cwe": {
"id": "CWE-287",
"name": "Improper Authentication"
},
"discovery_date": "2018-08-16T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1618767"
}
],
"notes": [
{
"category": "description",
"text": "In Eclipse OpenJ9 version 0.8, users other than the process owner may be able to use Java Attach API to connect to an Eclipse OpenJ9 or IBM JVM on the same machine and use Attach API operations, which includes the ability to execute untrusted native code. Attach API is enabled by default on Windows, Linux and AIX JVMs and can be disabled using the command line option -Dcom.ibm.tools.attach.enable=no.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "JDK: privilege escalation via insufficiently restricted access to Attach API",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-plugin-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-plugin-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-plugin-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-plugin-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-12539"
},
{
"category": "external",
"summary": "RHBZ#1618767",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1618767"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-12539",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-12539"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-12539",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-12539"
}
],
"release_date": "2018-05-11T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-08-27T14:21:31+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of IBM Java must be restarted for this update to take effect.",
"product_ids": [
"7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-plugin-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-plugin-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-plugin-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-plugin-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:2569"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 8.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-plugin-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-plugin-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-plugin-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-plugin-1:1.7.1.4.30-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.1.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "JDK: privilege escalation via insufficiently restricted access to Attach API"
}
]
}
rhsa-2018:3008
Vulnerability from csaf_redhat
Published
2018-10-24 21:39
Modified
2025-08-04 12:07
Summary
Red Hat Security Advisory: java-1.6.0-sun security update
Notes
Topic
An update for java-1.6.0-sun is now available for Oracle Java for Red Hat Enterprise Linux 6.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
Oracle Java SE version 6 includes the Oracle Java Runtime Environment and the Oracle Java Software Development Kit.
This update upgrades Oracle Java SE 6 to version 6 Update 211.
Security Fix(es):
* OpenJDK: Incomplete enforcement of the trustURLCodebase restriction (JNDI, 8199177) (CVE-2018-3149)
* Oracle JDK: unspecified vulnerability fixed in 6u201, 7u191, 8u181, and 10.0.2 (Libraries) (CVE-2018-2940)
* OpenJDK: insufficient index validation in PatternSyntaxException getMessage() (Concurrency, 8199547) (CVE-2018-2952)
* Oracle JDK: unspecified vulnerability fixed in 6u201, 7u191, 8u181, and 10.0.2 (JSSE) (CVE-2018-2973)
* OpenJDK: Incorrect handling of unsigned attributes in signed Jar manifests (Security, 8194534) (CVE-2018-3136)
* OpenJDK: Leak of sensitive header data via HTTP redirect (Networking, 8196902) (CVE-2018-3139)
* OpenJDK: Missing endpoint identification algorithm check during TLS session resumption (JSSE, 8202613) (CVE-2018-3180)
* OpenJDK: Infinite loop in RIFF format reader (Sound, 8205361) (CVE-2018-3214)
* libpng: Integer overflow and resultant divide-by-zero in pngrutil.c:png_check_chunk_length() allows for denial of service (CVE-2018-13785)
For more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for java-1.6.0-sun is now available for Oracle Java for Red Hat Enterprise Linux 6.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Oracle Java SE version 6 includes the Oracle Java Runtime Environment and the Oracle Java Software Development Kit.\n\nThis update upgrades Oracle Java SE 6 to version 6 Update 211.\n\nSecurity Fix(es):\n\n* OpenJDK: Incomplete enforcement of the trustURLCodebase restriction (JNDI, 8199177) (CVE-2018-3149)\n\n* Oracle JDK: unspecified vulnerability fixed in 6u201, 7u191, 8u181, and 10.0.2 (Libraries) (CVE-2018-2940)\n\n* OpenJDK: insufficient index validation in PatternSyntaxException getMessage() (Concurrency, 8199547) (CVE-2018-2952)\n\n* Oracle JDK: unspecified vulnerability fixed in 6u201, 7u191, 8u181, and 10.0.2 (JSSE) (CVE-2018-2973)\n\n* OpenJDK: Incorrect handling of unsigned attributes in signed Jar manifests (Security, 8194534) (CVE-2018-3136)\n\n* OpenJDK: Leak of sensitive header data via HTTP redirect (Networking, 8196902) (CVE-2018-3139)\n\n* OpenJDK: Missing endpoint identification algorithm check during TLS session resumption (JSSE, 8202613) (CVE-2018-3180)\n\n* OpenJDK: Infinite loop in RIFF format reader (Sound, 8205361) (CVE-2018-3214)\n\n* libpng: Integer overflow and resultant divide-by-zero in pngrutil.c:png_check_chunk_length() allows for denial of service (CVE-2018-13785)\n\nFor more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2018:3008",
"url": "https://access.redhat.com/errata/RHSA-2018:3008"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "1599943",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1599943"
},
{
"category": "external",
"summary": "1600925",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1600925"
},
{
"category": "external",
"summary": "1602145",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1602145"
},
{
"category": "external",
"summary": "1602146",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1602146"
},
{
"category": "external",
"summary": "1639301",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1639301"
},
{
"category": "external",
"summary": "1639442",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1639442"
},
{
"category": "external",
"summary": "1639484",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1639484"
},
{
"category": "external",
"summary": "1639755",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1639755"
},
{
"category": "external",
"summary": "1639834",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1639834"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_3008.json"
}
],
"title": "Red Hat Security Advisory: java-1.6.0-sun security update",
"tracking": {
"current_release_date": "2025-08-04T12:07:22+00:00",
"generator": {
"date": "2025-08-04T12:07:22+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.6.6"
}
},
"id": "RHSA-2018:3008",
"initial_release_date": "2018-10-24T21:39:49+00:00",
"revision_history": [
{
"date": "2018-10-24T21:39:49+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2018-10-24T21:39:49+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2025-08-04T12:07:22+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Oracle Java for Red Hat Enterprise Linux Desktop 6",
"product": {
"name": "Oracle Java for Red Hat Enterprise Linux Desktop 6",
"product_id": "6Client-OracleJava-6.10.Z",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras_oracle_java:6"
}
}
},
{
"category": "product_name",
"name": "Oracle Java for Red Hat Enterprise Linux HPC Node 6",
"product": {
"name": "Oracle Java for Red Hat Enterprise Linux HPC Node 6",
"product_id": "6ComputeNode-OracleJava-6.10.Z",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras_oracle_java:6"
}
}
},
{
"category": "product_name",
"name": "Oracle Java for Red Hat Enterprise Linux Server 6",
"product": {
"name": "Oracle Java for Red Hat Enterprise Linux Server 6",
"product_id": "6Server-OracleJava-6.10.Z",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras_oracle_java:6"
}
}
},
{
"category": "product_name",
"name": "Oracle Java for Red Hat Enterprise Linux Workstation 6",
"product": {
"name": "Oracle Java for Red Hat Enterprise Linux Workstation 6",
"product_id": "6Workstation-OracleJava-6.10.Z",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras_oracle_java:6"
}
}
}
],
"category": "product_family",
"name": "Oracle Java for Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6.x86_64",
"product": {
"name": "java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6.x86_64",
"product_id": "java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.6.0-sun@1.6.0.211-1jpp.1.el6?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el6.x86_64",
"product": {
"name": "java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el6.x86_64",
"product_id": "java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.6.0-sun-devel@1.6.0.211-1jpp.1.el6?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el6.x86_64",
"product": {
"name": "java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el6.x86_64",
"product_id": "java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.6.0-sun-plugin@1.6.0.211-1jpp.1.el6?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el6.x86_64",
"product": {
"name": "java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el6.x86_64",
"product_id": "java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.6.0-sun-src@1.6.0.211-1jpp.1.el6?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el6.x86_64",
"product": {
"name": "java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el6.x86_64",
"product_id": "java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.6.0-sun-demo@1.6.0.211-1jpp.1.el6?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el6.x86_64",
"product": {
"name": "java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el6.x86_64",
"product_id": "java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.6.0-sun-jdbc@1.6.0.211-1jpp.1.el6?arch=x86_64\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6.i686",
"product": {
"name": "java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6.i686",
"product_id": "java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.6.0-sun@1.6.0.211-1jpp.1.el6?arch=i686\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el6.i686",
"product": {
"name": "java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el6.i686",
"product_id": "java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.6.0-sun-devel@1.6.0.211-1jpp.1.el6?arch=i686\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el6.i686",
"product": {
"name": "java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el6.i686",
"product_id": "java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.6.0-sun-plugin@1.6.0.211-1jpp.1.el6?arch=i686\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el6.i686",
"product": {
"name": "java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el6.i686",
"product_id": "java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.6.0-sun-src@1.6.0.211-1jpp.1.el6?arch=i686\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el6.i686",
"product": {
"name": "java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el6.i686",
"product_id": "java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.6.0-sun-demo@1.6.0.211-1jpp.1.el6?arch=i686\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el6.i686",
"product": {
"name": "java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el6.i686",
"product_id": "java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.6.0-sun-jdbc@1.6.0.211-1jpp.1.el6?arch=i686\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "i686"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux Desktop 6",
"product_id": "6Client-OracleJava-6.10.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6.i686"
},
"product_reference": "java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6.i686",
"relates_to_product_reference": "6Client-OracleJava-6.10.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Desktop 6",
"product_id": "6Client-OracleJava-6.10.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6.x86_64"
},
"product_reference": "java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6.x86_64",
"relates_to_product_reference": "6Client-OracleJava-6.10.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux Desktop 6",
"product_id": "6Client-OracleJava-6.10.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el6.i686"
},
"product_reference": "java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el6.i686",
"relates_to_product_reference": "6Client-OracleJava-6.10.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Desktop 6",
"product_id": "6Client-OracleJava-6.10.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el6.x86_64"
},
"product_reference": "java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el6.x86_64",
"relates_to_product_reference": "6Client-OracleJava-6.10.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux Desktop 6",
"product_id": "6Client-OracleJava-6.10.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el6.i686"
},
"product_reference": "java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el6.i686",
"relates_to_product_reference": "6Client-OracleJava-6.10.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Desktop 6",
"product_id": "6Client-OracleJava-6.10.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el6.x86_64"
},
"product_reference": "java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el6.x86_64",
"relates_to_product_reference": "6Client-OracleJava-6.10.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux Desktop 6",
"product_id": "6Client-OracleJava-6.10.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el6.i686"
},
"product_reference": "java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el6.i686",
"relates_to_product_reference": "6Client-OracleJava-6.10.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Desktop 6",
"product_id": "6Client-OracleJava-6.10.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el6.x86_64"
},
"product_reference": "java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el6.x86_64",
"relates_to_product_reference": "6Client-OracleJava-6.10.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux Desktop 6",
"product_id": "6Client-OracleJava-6.10.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el6.i686"
},
"product_reference": "java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el6.i686",
"relates_to_product_reference": "6Client-OracleJava-6.10.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Desktop 6",
"product_id": "6Client-OracleJava-6.10.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el6.x86_64"
},
"product_reference": "java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el6.x86_64",
"relates_to_product_reference": "6Client-OracleJava-6.10.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux Desktop 6",
"product_id": "6Client-OracleJava-6.10.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el6.i686"
},
"product_reference": "java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el6.i686",
"relates_to_product_reference": "6Client-OracleJava-6.10.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Desktop 6",
"product_id": "6Client-OracleJava-6.10.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el6.x86_64"
},
"product_reference": "java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el6.x86_64",
"relates_to_product_reference": "6Client-OracleJava-6.10.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux HPC Node 6",
"product_id": "6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6.i686"
},
"product_reference": "java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6.i686",
"relates_to_product_reference": "6ComputeNode-OracleJava-6.10.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux HPC Node 6",
"product_id": "6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6.x86_64"
},
"product_reference": "java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6.x86_64",
"relates_to_product_reference": "6ComputeNode-OracleJava-6.10.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux HPC Node 6",
"product_id": "6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el6.i686"
},
"product_reference": "java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el6.i686",
"relates_to_product_reference": "6ComputeNode-OracleJava-6.10.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux HPC Node 6",
"product_id": "6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el6.x86_64"
},
"product_reference": "java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el6.x86_64",
"relates_to_product_reference": "6ComputeNode-OracleJava-6.10.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux HPC Node 6",
"product_id": "6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el6.i686"
},
"product_reference": "java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el6.i686",
"relates_to_product_reference": "6ComputeNode-OracleJava-6.10.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux HPC Node 6",
"product_id": "6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el6.x86_64"
},
"product_reference": "java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el6.x86_64",
"relates_to_product_reference": "6ComputeNode-OracleJava-6.10.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux HPC Node 6",
"product_id": "6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el6.i686"
},
"product_reference": "java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el6.i686",
"relates_to_product_reference": "6ComputeNode-OracleJava-6.10.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux HPC Node 6",
"product_id": "6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el6.x86_64"
},
"product_reference": "java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el6.x86_64",
"relates_to_product_reference": "6ComputeNode-OracleJava-6.10.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux HPC Node 6",
"product_id": "6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el6.i686"
},
"product_reference": "java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el6.i686",
"relates_to_product_reference": "6ComputeNode-OracleJava-6.10.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux HPC Node 6",
"product_id": "6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el6.x86_64"
},
"product_reference": "java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el6.x86_64",
"relates_to_product_reference": "6ComputeNode-OracleJava-6.10.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux HPC Node 6",
"product_id": "6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el6.i686"
},
"product_reference": "java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el6.i686",
"relates_to_product_reference": "6ComputeNode-OracleJava-6.10.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux HPC Node 6",
"product_id": "6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el6.x86_64"
},
"product_reference": "java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el6.x86_64",
"relates_to_product_reference": "6ComputeNode-OracleJava-6.10.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux Server 6",
"product_id": "6Server-OracleJava-6.10.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6.i686"
},
"product_reference": "java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6.i686",
"relates_to_product_reference": "6Server-OracleJava-6.10.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Server 6",
"product_id": "6Server-OracleJava-6.10.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6.x86_64"
},
"product_reference": "java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6.x86_64",
"relates_to_product_reference": "6Server-OracleJava-6.10.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux Server 6",
"product_id": "6Server-OracleJava-6.10.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el6.i686"
},
"product_reference": "java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el6.i686",
"relates_to_product_reference": "6Server-OracleJava-6.10.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Server 6",
"product_id": "6Server-OracleJava-6.10.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el6.x86_64"
},
"product_reference": "java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el6.x86_64",
"relates_to_product_reference": "6Server-OracleJava-6.10.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux Server 6",
"product_id": "6Server-OracleJava-6.10.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el6.i686"
},
"product_reference": "java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el6.i686",
"relates_to_product_reference": "6Server-OracleJava-6.10.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Server 6",
"product_id": "6Server-OracleJava-6.10.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el6.x86_64"
},
"product_reference": "java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el6.x86_64",
"relates_to_product_reference": "6Server-OracleJava-6.10.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux Server 6",
"product_id": "6Server-OracleJava-6.10.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el6.i686"
},
"product_reference": "java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el6.i686",
"relates_to_product_reference": "6Server-OracleJava-6.10.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Server 6",
"product_id": "6Server-OracleJava-6.10.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el6.x86_64"
},
"product_reference": "java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el6.x86_64",
"relates_to_product_reference": "6Server-OracleJava-6.10.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux Server 6",
"product_id": "6Server-OracleJava-6.10.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el6.i686"
},
"product_reference": "java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el6.i686",
"relates_to_product_reference": "6Server-OracleJava-6.10.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Server 6",
"product_id": "6Server-OracleJava-6.10.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el6.x86_64"
},
"product_reference": "java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el6.x86_64",
"relates_to_product_reference": "6Server-OracleJava-6.10.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux Server 6",
"product_id": "6Server-OracleJava-6.10.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el6.i686"
},
"product_reference": "java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el6.i686",
"relates_to_product_reference": "6Server-OracleJava-6.10.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Server 6",
"product_id": "6Server-OracleJava-6.10.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el6.x86_64"
},
"product_reference": "java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el6.x86_64",
"relates_to_product_reference": "6Server-OracleJava-6.10.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux Workstation 6",
"product_id": "6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6.i686"
},
"product_reference": "java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6.i686",
"relates_to_product_reference": "6Workstation-OracleJava-6.10.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Workstation 6",
"product_id": "6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6.x86_64"
},
"product_reference": "java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6.x86_64",
"relates_to_product_reference": "6Workstation-OracleJava-6.10.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux Workstation 6",
"product_id": "6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el6.i686"
},
"product_reference": "java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el6.i686",
"relates_to_product_reference": "6Workstation-OracleJava-6.10.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Workstation 6",
"product_id": "6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el6.x86_64"
},
"product_reference": "java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el6.x86_64",
"relates_to_product_reference": "6Workstation-OracleJava-6.10.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux Workstation 6",
"product_id": "6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el6.i686"
},
"product_reference": "java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el6.i686",
"relates_to_product_reference": "6Workstation-OracleJava-6.10.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Workstation 6",
"product_id": "6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el6.x86_64"
},
"product_reference": "java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el6.x86_64",
"relates_to_product_reference": "6Workstation-OracleJava-6.10.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux Workstation 6",
"product_id": "6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el6.i686"
},
"product_reference": "java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el6.i686",
"relates_to_product_reference": "6Workstation-OracleJava-6.10.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Workstation 6",
"product_id": "6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el6.x86_64"
},
"product_reference": "java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el6.x86_64",
"relates_to_product_reference": "6Workstation-OracleJava-6.10.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux Workstation 6",
"product_id": "6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el6.i686"
},
"product_reference": "java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el6.i686",
"relates_to_product_reference": "6Workstation-OracleJava-6.10.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Workstation 6",
"product_id": "6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el6.x86_64"
},
"product_reference": "java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el6.x86_64",
"relates_to_product_reference": "6Workstation-OracleJava-6.10.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux Workstation 6",
"product_id": "6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el6.i686"
},
"product_reference": "java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el6.i686",
"relates_to_product_reference": "6Workstation-OracleJava-6.10.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Workstation 6",
"product_id": "6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el6.x86_64"
},
"product_reference": "java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el6.x86_64",
"relates_to_product_reference": "6Workstation-OracleJava-6.10.Z"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2018-2940",
"discovery_date": "2018-07-17T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1602146"
}
],
"notes": [
{
"category": "description",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries). Supported versions that are affected are Java SE: 6u191, 7u181, 8u172 and 10.0.1; Java SE Embedded: 8u171. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 4.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "JDK: unspecified vulnerability fixed in 6u201, 7u191, 8u181, and 10.0.2 (Libraries)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-2940"
},
{
"category": "external",
"summary": "RHBZ#1602146",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1602146"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-2940",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-2940"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2940",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2940"
},
{
"category": "external",
"summary": "http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html#AppendixJAVA",
"url": "http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html#AppendixJAVA"
}
],
"release_date": "2018-07-17T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-10-24T21:39:49+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.",
"product_ids": [
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:3008"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "JDK: unspecified vulnerability fixed in 6u201, 7u191, 8u181, and 10.0.2 (Libraries)"
},
{
"cve": "CVE-2018-2952",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2018-07-11T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1600925"
}
],
"notes": [
{
"category": "description",
"text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Concurrency). Supported versions that are affected are Java SE: 6u191, 7u181, 8u172 and 10.0.1; Java SE Embedded: 8u171; JRockit: R28.3.18. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 3.7 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK: insufficient index validation in PatternSyntaxException getMessage() (Concurrency, 8199547)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-2952"
},
{
"category": "external",
"summary": "RHBZ#1600925",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1600925"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-2952",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-2952"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2952",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2952"
}
],
"release_date": "2018-07-17T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-10-24T21:39:49+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.",
"product_ids": [
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:3008"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 3.7,
"baseSeverity": "LOW",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "OpenJDK: insufficient index validation in PatternSyntaxException getMessage() (Concurrency, 8199547)"
},
{
"cve": "CVE-2018-2973",
"discovery_date": "2018-07-17T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1602145"
}
],
"notes": [
{
"category": "description",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: JSSE). Supported versions that are affected are Java SE: 6u191, 7u181, 8u172 and 10.0.1; Java SE Embedded: 8u171. Difficult to exploit vulnerability allows unauthenticated attacker with network access via SSL/TLS to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 5.9 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "JDK: unspecified vulnerability fixed in 6u201, 7u191, 8u181, and 10.0.2 (JSSE)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-2973"
},
{
"category": "external",
"summary": "RHBZ#1602145",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1602145"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-2973",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-2973"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2973",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2973"
},
{
"category": "external",
"summary": "http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html#AppendixJAVA",
"url": "http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html#AppendixJAVA"
}
],
"release_date": "2018-07-17T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-10-24T21:39:49+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.",
"product_ids": [
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:3008"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.0"
},
"products": [
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "JDK: unspecified vulnerability fixed in 6u201, 7u191, 8u181, and 10.0.2 (JSSE)"
},
{
"cve": "CVE-2018-3136",
"cwe": {
"id": "CWE-347",
"name": "Improper Verification of Cryptographic Signature"
},
"discovery_date": "2018-09-28T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1639755"
}
],
"notes": [
{
"category": "description",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u201, 7u191, 8u182 and 11; Java SE Embedded: 8u181. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, Java SE Embedded, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g. code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g. code installed by an administrator). CVSS 3.0 Base Score 3.4 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:L/A:N).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK: Incorrect handling of unsigned attributes in signed Jar manifests (Security, 8194534)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-3136"
},
{
"category": "external",
"summary": "RHBZ#1639755",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1639755"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-3136",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-3136"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-3136",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-3136"
}
],
"release_date": "2018-10-16T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-10-24T21:39:49+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.",
"product_ids": [
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:3008"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 3.1,
"baseSeverity": "LOW",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.0"
},
"products": [
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "OpenJDK: Incorrect handling of unsigned attributes in signed Jar manifests (Security, 8194534)"
},
{
"cve": "CVE-2018-3139",
"cwe": {
"id": "CWE-201",
"name": "Insertion of Sensitive Information Into Sent Data"
},
"discovery_date": "2018-09-28T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1639442"
}
],
"notes": [
{
"category": "description",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Networking). Supported versions that are affected are Java SE: 6u201, 7u191, 8u182 and 11; Java SE Embedded: 8u181. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g. code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g. code installed by an administrator). CVSS 3.0 Base Score 3.1 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK: Leak of sensitive header data via HTTP redirect (Networking, 8196902)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-3139"
},
{
"category": "external",
"summary": "RHBZ#1639442",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1639442"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-3139",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-3139"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-3139",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-3139"
}
],
"release_date": "2018-10-16T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-10-24T21:39:49+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.",
"product_ids": [
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:3008"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 3.1,
"baseSeverity": "LOW",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "OpenJDK: Leak of sensitive header data via HTTP redirect (Networking, 8196902)"
},
{
"cve": "CVE-2018-3149",
"cwe": {
"id": "CWE-426",
"name": "Untrusted Search Path"
},
"discovery_date": "2018-09-28T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1639834"
}
],
"notes": [
{
"category": "description",
"text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JNDI). Supported versions that are affected are Java SE: 6u201, 7u191, 8u182 and 11; Java SE Embedded: 8u181; JRockit: R28.3.19. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, Java SE Embedded, JRockit, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE, Java SE Embedded, JRockit. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g. code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g. through a web service which supplies data to the APIs. CVSS 3.0 Base Score 8.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK: Incomplete enforcement of the trustURLCodebase restriction (JNDI, 8199177)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-3149"
},
{
"category": "external",
"summary": "RHBZ#1639834",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1639834"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-3149",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-3149"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-3149",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-3149"
}
],
"release_date": "2018-10-16T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-10-24T21:39:49+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.",
"product_ids": [
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:3008"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "OpenJDK: Incomplete enforcement of the trustURLCodebase restriction (JNDI, 8199177)"
},
{
"cve": "CVE-2018-3180",
"cwe": {
"id": "CWE-295",
"name": "Improper Certificate Validation"
},
"discovery_date": "2018-09-28T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1639484"
}
],
"notes": [
{
"category": "description",
"text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JSSE). Supported versions that are affected are Java SE: 6u201, 7u191, 8u182 and 11; Java SE Embedded: 8u181; JRockit: R28.3.19. Difficult to exploit vulnerability allows unauthenticated attacker with network access via SSL/TLS to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded, JRockit accessible data as well as unauthorized read access to a subset of Java SE, Java SE Embedded, JRockit accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g. code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g. through a web service which supplies data to the APIs. CVSS 3.0 Base Score 5.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK: Missing endpoint identification algorithm check during TLS session resumption (JSSE, 8202613)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-3180"
},
{
"category": "external",
"summary": "RHBZ#1639484",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1639484"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-3180",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-3180"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-3180",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-3180"
}
],
"release_date": "2018-10-16T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-10-24T21:39:49+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.",
"product_ids": [
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:3008"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 4.8,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "OpenJDK: Missing endpoint identification algorithm check during TLS session resumption (JSSE, 8202613)"
},
{
"cve": "CVE-2018-3214",
"cwe": {
"id": "CWE-835",
"name": "Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)"
},
"discovery_date": "2018-09-28T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1639301"
}
],
"notes": [
{
"category": "description",
"text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Sound). Supported versions that are affected are Java SE: 6u201, 7u191 and 8u182; Java SE Embedded: 8u181; JRockit: R28.3.19. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g. through a web service which supplies data to the APIs. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK: Infinite loop in RIFF format reader (Sound, 8205361)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-3214"
},
{
"category": "external",
"summary": "RHBZ#1639301",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1639301"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-3214",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-3214"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-3214",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-3214"
}
],
"release_date": "2018-10-16T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-10-24T21:39:49+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.",
"product_ids": [
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:3008"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "OpenJDK: Infinite loop in RIFF format reader (Sound, 8205361)"
},
{
"cve": "CVE-2018-13785",
"cwe": {
"id": "CWE-369",
"name": "Divide By Zero"
},
"discovery_date": "2018-07-11T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1599943"
}
],
"notes": [
{
"category": "description",
"text": "In libpng 1.6.34, a wrong calculation of row_factor in the png_check_chunk_length function (pngrutil.c) may trigger an integer overflow and resultant divide-by-zero while processing a crafted PNG file, leading to a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "libpng: Integer overflow and resultant divide-by-zero in pngrutil.c:png_check_chunk_length() allows for denial of service",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-13785"
},
{
"category": "external",
"summary": "RHBZ#1599943",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1599943"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-13785",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-13785"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-13785",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-13785"
}
],
"release_date": "2018-04-05T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-10-24T21:39:49+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.",
"product_ids": [
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:3008"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-demo-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-devel-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-jdbc-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-plugin-1:1.6.0.211-1jpp.1.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.6.0-sun-src-1:1.6.0.211-1jpp.1.el6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "libpng: Integer overflow and resultant divide-by-zero in pngrutil.c:png_check_chunk_length() allows for denial of service"
}
]
}
rhsa-2018:2712
Vulnerability from csaf_redhat
Published
2018-09-17 14:51
Modified
2025-08-03 22:19
Summary
Red Hat Security Advisory: java-1.7.1-ibm security update
Notes
Topic
An update for java-1.7.1-ibm is now available for Red Hat Satellite 5.6 and Red Hat Satellite 5.7.
Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
IBM Java SE version 7 Release 1 includes the IBM Java Runtime Environment and the IBM Java Software Development Kit.
This update upgrades IBM Java SE 7 to version 7R1 SR4-FP30.
Security Fix(es):
* IBM JDK: privilege escalation via insufficiently restricted access to Attach API (CVE-2018-12539)
* IBM JDK: DoS in the java.math component (CVE-2018-1517)
* IBM JDK: path traversal flaw in the Diagnostic Tooling Framework (CVE-2018-1656)
* Oracle JDK: unspecified vulnerability fixed in 6u201, 7u191, 8u181, and 10.0.2 (Libraries) (CVE-2018-2940)
* OpenJDK: insufficient index validation in PatternSyntaxException getMessage() (Concurrency, 8199547) (CVE-2018-2952)
* Oracle JDK: unspecified vulnerability fixed in 6u201, 7u191, 8u181, and 10.0.2 (JSSE) (CVE-2018-2973)
For more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for java-1.7.1-ibm is now available for Red Hat Satellite 5.6 and Red Hat Satellite 5.7.\n\nRed Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "IBM Java SE version 7 Release 1 includes the IBM Java Runtime Environment and the IBM Java Software Development Kit.\n\nThis update upgrades IBM Java SE 7 to version 7R1 SR4-FP30.\n\nSecurity Fix(es):\n\n* IBM JDK: privilege escalation via insufficiently restricted access to Attach API (CVE-2018-12539)\n\n* IBM JDK: DoS in the java.math component (CVE-2018-1517)\n\n* IBM JDK: path traversal flaw in the Diagnostic Tooling Framework (CVE-2018-1656)\n\n* Oracle JDK: unspecified vulnerability fixed in 6u201, 7u191, 8u181, and 10.0.2 (Libraries) (CVE-2018-2940)\n\n* OpenJDK: insufficient index validation in PatternSyntaxException getMessage() (Concurrency, 8199547) (CVE-2018-2952)\n\n* Oracle JDK: unspecified vulnerability fixed in 6u201, 7u191, 8u181, and 10.0.2 (JSSE) (CVE-2018-2973)\n\nFor more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2018:2712",
"url": "https://access.redhat.com/errata/RHSA-2018:2712"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#moderate",
"url": "https://access.redhat.com/security/updates/classification/#moderate"
},
{
"category": "external",
"summary": "1600925",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1600925"
},
{
"category": "external",
"summary": "1602145",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1602145"
},
{
"category": "external",
"summary": "1602146",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1602146"
},
{
"category": "external",
"summary": "1618767",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1618767"
},
{
"category": "external",
"summary": "1618869",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1618869"
},
{
"category": "external",
"summary": "1618871",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1618871"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_2712.json"
}
],
"title": "Red Hat Security Advisory: java-1.7.1-ibm security update",
"tracking": {
"current_release_date": "2025-08-03T22:19:51+00:00",
"generator": {
"date": "2025-08-03T22:19:51+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.6.6"
}
},
"id": "RHSA-2018:2712",
"initial_release_date": "2018-09-17T14:51:15+00:00",
"revision_history": [
{
"date": "2018-09-17T14:51:15+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2018-09-17T14:51:15+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2025-08-03T22:19:51+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Satellite 5.6 (RHEL v.6)",
"product": {
"name": "Red Hat Satellite 5.6 (RHEL v.6)",
"product_id": "6Server-Satellite56",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:network_satellite:5.6::el6"
}
}
},
{
"category": "product_name",
"name": "Red Hat Satellite 5.7 (RHEL v.6)",
"product": {
"name": "Red Hat Satellite 5.7 (RHEL v.6)",
"product_id": "6Server-Satellite57",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:network_satellite:5.7::el6"
}
}
}
],
"category": "product_family",
"name": "Red Hat Satellite"
},
{
"branches": [
{
"category": "product_version",
"name": "java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"product": {
"name": "java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"product_id": "java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.7.1-ibm@1.7.1.4.30-1jpp.2.el6_10?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"product": {
"name": "java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"product_id": "java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.7.1-ibm-devel@1.7.1.4.30-1jpp.2.el6_10?arch=x86_64\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"product": {
"name": "java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"product_id": "java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.7.1-ibm@1.7.1.4.30-1jpp.2.el6_10?arch=s390x\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"product": {
"name": "java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"product_id": "java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.7.1-ibm-devel@1.7.1.4.30-1jpp.2.el6_10?arch=s390x\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "s390x"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.s390x as a component of Red Hat Satellite 5.6 (RHEL v.6)",
"product_id": "6Server-Satellite56:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.s390x"
},
"product_reference": "java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"relates_to_product_reference": "6Server-Satellite56"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.x86_64 as a component of Red Hat Satellite 5.6 (RHEL v.6)",
"product_id": "6Server-Satellite56:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.x86_64"
},
"product_reference": "java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"relates_to_product_reference": "6Server-Satellite56"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.s390x as a component of Red Hat Satellite 5.6 (RHEL v.6)",
"product_id": "6Server-Satellite56:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.s390x"
},
"product_reference": "java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"relates_to_product_reference": "6Server-Satellite56"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.x86_64 as a component of Red Hat Satellite 5.6 (RHEL v.6)",
"product_id": "6Server-Satellite56:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.x86_64"
},
"product_reference": "java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"relates_to_product_reference": "6Server-Satellite56"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.s390x as a component of Red Hat Satellite 5.7 (RHEL v.6)",
"product_id": "6Server-Satellite57:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.s390x"
},
"product_reference": "java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"relates_to_product_reference": "6Server-Satellite57"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.x86_64 as a component of Red Hat Satellite 5.7 (RHEL v.6)",
"product_id": "6Server-Satellite57:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.x86_64"
},
"product_reference": "java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"relates_to_product_reference": "6Server-Satellite57"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.s390x as a component of Red Hat Satellite 5.7 (RHEL v.6)",
"product_id": "6Server-Satellite57:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.s390x"
},
"product_reference": "java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"relates_to_product_reference": "6Server-Satellite57"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.x86_64 as a component of Red Hat Satellite 5.7 (RHEL v.6)",
"product_id": "6Server-Satellite57:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.x86_64"
},
"product_reference": "java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"relates_to_product_reference": "6Server-Satellite57"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2018-1517",
"discovery_date": "2018-08-16T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1618871"
}
],
"notes": [
{
"category": "description",
"text": "A flaw in the java.math component in IBM SDK, Java Technology Edition 6.0, 7.0, and 8.0 may allow an attacker to inflict a denial-of-service attack with specially crafted String data. IBM X-Force ID: 141681.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "JDK: DoS in the java.math component",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-Satellite56:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Server-Satellite56:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Server-Satellite56:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Server-Satellite56:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Server-Satellite57:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Server-Satellite57:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Server-Satellite57:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Server-Satellite57:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-1517"
},
{
"category": "external",
"summary": "RHBZ#1618871",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1618871"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-1517",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-1517"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-1517",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-1517"
}
],
"release_date": "2018-08-16T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-09-17T14:51:15+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nFor this update to take effect, Red Hat Satellite must be restarted (\"/usr/sbin/rhn-satellite restart\"). All running instances of IBM Java must be restarted for this update to take effect.",
"product_ids": [
"6Server-Satellite56:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Server-Satellite56:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Server-Satellite56:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Server-Satellite56:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Server-Satellite57:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Server-Satellite57:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Server-Satellite57:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Server-Satellite57:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:2712"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"6Server-Satellite56:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Server-Satellite56:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Server-Satellite56:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Server-Satellite56:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Server-Satellite57:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Server-Satellite57:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Server-Satellite57:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Server-Satellite57:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "JDK: DoS in the java.math component"
},
{
"cve": "CVE-2018-1656",
"cwe": {
"id": "CWE-22",
"name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)"
},
"discovery_date": "2018-08-16T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1618869"
}
],
"notes": [
{
"category": "description",
"text": "The IBM Java Runtime Environment\u0027s Diagnostic Tooling Framework for Java (DTFJ) (IBM SDK, Java Technology Edition 6.0 , 7.0, and 8.0) does not protect against path traversal attacks when extracting compressed dump files. IBM X-Force ID: 144882.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "JDK: path traversal flaw in the Diagnostic Tooling Framework",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-Satellite56:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Server-Satellite56:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Server-Satellite56:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Server-Satellite56:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Server-Satellite57:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Server-Satellite57:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Server-Satellite57:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Server-Satellite57:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-1656"
},
{
"category": "external",
"summary": "RHBZ#1618869",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1618869"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-1656",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-1656"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-1656",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-1656"
}
],
"release_date": "2018-08-16T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-09-17T14:51:15+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nFor this update to take effect, Red Hat Satellite must be restarted (\"/usr/sbin/rhn-satellite restart\"). All running instances of IBM Java must be restarted for this update to take effect.",
"product_ids": [
"6Server-Satellite56:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Server-Satellite56:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Server-Satellite56:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Server-Satellite56:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Server-Satellite57:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Server-Satellite57:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Server-Satellite57:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Server-Satellite57:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:2712"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.0"
},
"products": [
"6Server-Satellite56:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Server-Satellite56:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Server-Satellite56:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Server-Satellite56:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Server-Satellite57:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Server-Satellite57:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Server-Satellite57:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Server-Satellite57:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "JDK: path traversal flaw in the Diagnostic Tooling Framework"
},
{
"cve": "CVE-2018-2940",
"discovery_date": "2018-07-17T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1602146"
}
],
"notes": [
{
"category": "description",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries). Supported versions that are affected are Java SE: 6u191, 7u181, 8u172 and 10.0.1; Java SE Embedded: 8u171. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 4.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "JDK: unspecified vulnerability fixed in 6u201, 7u191, 8u181, and 10.0.2 (Libraries)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-Satellite56:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Server-Satellite56:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Server-Satellite56:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Server-Satellite56:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Server-Satellite57:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Server-Satellite57:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Server-Satellite57:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Server-Satellite57:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-2940"
},
{
"category": "external",
"summary": "RHBZ#1602146",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1602146"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-2940",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-2940"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2940",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2940"
},
{
"category": "external",
"summary": "http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html#AppendixJAVA",
"url": "http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html#AppendixJAVA"
}
],
"release_date": "2018-07-17T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-09-17T14:51:15+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nFor this update to take effect, Red Hat Satellite must be restarted (\"/usr/sbin/rhn-satellite restart\"). All running instances of IBM Java must be restarted for this update to take effect.",
"product_ids": [
"6Server-Satellite56:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Server-Satellite56:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Server-Satellite56:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Server-Satellite56:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Server-Satellite57:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Server-Satellite57:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Server-Satellite57:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Server-Satellite57:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:2712"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"6Server-Satellite56:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Server-Satellite56:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Server-Satellite56:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Server-Satellite56:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Server-Satellite57:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Server-Satellite57:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Server-Satellite57:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Server-Satellite57:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "JDK: unspecified vulnerability fixed in 6u201, 7u191, 8u181, and 10.0.2 (Libraries)"
},
{
"cve": "CVE-2018-2952",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2018-07-11T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1600925"
}
],
"notes": [
{
"category": "description",
"text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Concurrency). Supported versions that are affected are Java SE: 6u191, 7u181, 8u172 and 10.0.1; Java SE Embedded: 8u171; JRockit: R28.3.18. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 3.7 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK: insufficient index validation in PatternSyntaxException getMessage() (Concurrency, 8199547)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-Satellite56:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Server-Satellite56:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Server-Satellite56:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Server-Satellite56:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Server-Satellite57:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Server-Satellite57:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Server-Satellite57:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Server-Satellite57:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-2952"
},
{
"category": "external",
"summary": "RHBZ#1600925",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1600925"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-2952",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-2952"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2952",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2952"
}
],
"release_date": "2018-07-17T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-09-17T14:51:15+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nFor this update to take effect, Red Hat Satellite must be restarted (\"/usr/sbin/rhn-satellite restart\"). All running instances of IBM Java must be restarted for this update to take effect.",
"product_ids": [
"6Server-Satellite56:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Server-Satellite56:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Server-Satellite56:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Server-Satellite56:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Server-Satellite57:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Server-Satellite57:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Server-Satellite57:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Server-Satellite57:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:2712"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 3.7,
"baseSeverity": "LOW",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"6Server-Satellite56:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Server-Satellite56:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Server-Satellite56:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Server-Satellite56:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Server-Satellite57:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Server-Satellite57:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Server-Satellite57:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Server-Satellite57:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "OpenJDK: insufficient index validation in PatternSyntaxException getMessage() (Concurrency, 8199547)"
},
{
"cve": "CVE-2018-2973",
"discovery_date": "2018-07-17T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1602145"
}
],
"notes": [
{
"category": "description",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: JSSE). Supported versions that are affected are Java SE: 6u191, 7u181, 8u172 and 10.0.1; Java SE Embedded: 8u171. Difficult to exploit vulnerability allows unauthenticated attacker with network access via SSL/TLS to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 5.9 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "JDK: unspecified vulnerability fixed in 6u201, 7u191, 8u181, and 10.0.2 (JSSE)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-Satellite56:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Server-Satellite56:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Server-Satellite56:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Server-Satellite56:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Server-Satellite57:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Server-Satellite57:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Server-Satellite57:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Server-Satellite57:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-2973"
},
{
"category": "external",
"summary": "RHBZ#1602145",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1602145"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-2973",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-2973"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2973",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2973"
},
{
"category": "external",
"summary": "http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html#AppendixJAVA",
"url": "http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html#AppendixJAVA"
}
],
"release_date": "2018-07-17T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-09-17T14:51:15+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nFor this update to take effect, Red Hat Satellite must be restarted (\"/usr/sbin/rhn-satellite restart\"). All running instances of IBM Java must be restarted for this update to take effect.",
"product_ids": [
"6Server-Satellite56:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Server-Satellite56:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Server-Satellite56:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Server-Satellite56:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Server-Satellite57:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Server-Satellite57:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Server-Satellite57:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Server-Satellite57:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:2712"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.0"
},
"products": [
"6Server-Satellite56:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Server-Satellite56:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Server-Satellite56:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Server-Satellite56:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Server-Satellite57:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Server-Satellite57:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Server-Satellite57:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Server-Satellite57:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "JDK: unspecified vulnerability fixed in 6u201, 7u191, 8u181, and 10.0.2 (JSSE)"
},
{
"cve": "CVE-2018-12539",
"cwe": {
"id": "CWE-287",
"name": "Improper Authentication"
},
"discovery_date": "2018-08-16T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1618767"
}
],
"notes": [
{
"category": "description",
"text": "In Eclipse OpenJ9 version 0.8, users other than the process owner may be able to use Java Attach API to connect to an Eclipse OpenJ9 or IBM JVM on the same machine and use Attach API operations, which includes the ability to execute untrusted native code. Attach API is enabled by default on Windows, Linux and AIX JVMs and can be disabled using the command line option -Dcom.ibm.tools.attach.enable=no.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "JDK: privilege escalation via insufficiently restricted access to Attach API",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-Satellite56:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Server-Satellite56:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Server-Satellite56:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Server-Satellite56:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Server-Satellite57:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Server-Satellite57:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Server-Satellite57:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Server-Satellite57:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-12539"
},
{
"category": "external",
"summary": "RHBZ#1618767",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1618767"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-12539",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-12539"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-12539",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-12539"
}
],
"release_date": "2018-05-11T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-09-17T14:51:15+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nFor this update to take effect, Red Hat Satellite must be restarted (\"/usr/sbin/rhn-satellite restart\"). All running instances of IBM Java must be restarted for this update to take effect.",
"product_ids": [
"6Server-Satellite56:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Server-Satellite56:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Server-Satellite56:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Server-Satellite56:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Server-Satellite57:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Server-Satellite57:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Server-Satellite57:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Server-Satellite57:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:2712"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 8.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"6Server-Satellite56:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Server-Satellite56:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Server-Satellite56:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Server-Satellite56:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Server-Satellite57:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Server-Satellite57:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Server-Satellite57:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Server-Satellite57:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "JDK: privilege escalation via insufficiently restricted access to Attach API"
}
]
}
rhsa-2018:2241
Vulnerability from csaf_redhat
Published
2018-07-23 14:40
Modified
2025-08-03 18:28
Summary
Red Hat Security Advisory: java-1.8.0-openjdk security update
Notes
Topic
An update for java-1.8.0-openjdk is now available for Red Hat Enterprise Linux 6.
Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
The java-1.8.0-openjdk packages provide the OpenJDK 8 Java Runtime Environment and the OpenJDK 8 Java Software Development Kit.
Security Fix(es):
* OpenJDK: insufficient index validation in PatternSyntaxException getMessage() (Concurrency, 8199547) (CVE-2018-2952)
For more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for java-1.8.0-openjdk is now available for Red Hat Enterprise Linux 6.\n\nRed Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "The java-1.8.0-openjdk packages provide the OpenJDK 8 Java Runtime Environment and the OpenJDK 8 Java Software Development Kit.\n\nSecurity Fix(es):\n\n* OpenJDK: insufficient index validation in PatternSyntaxException getMessage() (Concurrency, 8199547) (CVE-2018-2952)\n\nFor more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2018:2241",
"url": "https://access.redhat.com/errata/RHSA-2018:2241"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#moderate",
"url": "https://access.redhat.com/security/updates/classification/#moderate"
},
{
"category": "external",
"summary": "1600925",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1600925"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_2241.json"
}
],
"title": "Red Hat Security Advisory: java-1.8.0-openjdk security update",
"tracking": {
"current_release_date": "2025-08-03T18:28:49+00:00",
"generator": {
"date": "2025-08-03T18:28:49+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.6.6"
}
},
"id": "RHSA-2018:2241",
"initial_release_date": "2018-07-23T14:40:57+00:00",
"revision_history": [
{
"date": "2018-07-23T14:40:57+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2018-07-23T14:40:57+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2025-08-03T18:28:49+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Desktop (v. 6)",
"product": {
"name": "Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client-6.10.z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:6::client"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Desktop Optional (v. 6)",
"product": {
"name": "Red Hat Enterprise Linux Desktop Optional (v. 6)",
"product_id": "6Client-optional-6.10.z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:6::client"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux HPC Node (v. 6)",
"product": {
"name": "Red Hat Enterprise Linux HPC Node (v. 6)",
"product_id": "6ComputeNode-6.10.z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:6::computenode"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux HPC Node Optional (v. 6)",
"product": {
"name": "Red Hat Enterprise Linux HPC Node Optional (v. 6)",
"product_id": "6ComputeNode-optional-6.10.z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:6::computenode"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Server (v. 6)",
"product": {
"name": "Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.10.z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:6::server"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Server Optional (v. 6)",
"product": {
"name": "Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional-6.10.z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:6::server"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Workstation (v. 6)",
"product": {
"name": "Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-6.10.z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:6::workstation"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Workstation Optional (v. 6)",
"product": {
"name": "Red Hat Enterprise Linux Workstation Optional (v. 6)",
"product_id": "6Workstation-optional-6.10.z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:6::workstation"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el6_10.x86_64",
"product": {
"name": "java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el6_10.x86_64",
"product_id": "java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el6_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-openjdk-debuginfo@1.8.0.181-3.b13.el6_10?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el6_10.x86_64",
"product": {
"name": "java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el6_10.x86_64",
"product_id": "java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el6_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-openjdk-headless@1.8.0.181-3.b13.el6_10?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-openjdk-1:1.8.0.181-3.b13.el6_10.x86_64",
"product": {
"name": "java-1.8.0-openjdk-1:1.8.0.181-3.b13.el6_10.x86_64",
"product_id": "java-1.8.0-openjdk-1:1.8.0.181-3.b13.el6_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-openjdk@1.8.0.181-3.b13.el6_10?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el6_10.x86_64",
"product": {
"name": "java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el6_10.x86_64",
"product_id": "java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el6_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-openjdk-src-debug@1.8.0.181-3.b13.el6_10?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el6_10.x86_64",
"product": {
"name": "java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el6_10.x86_64",
"product_id": "java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el6_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-openjdk-devel@1.8.0.181-3.b13.el6_10?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el6_10.x86_64",
"product": {
"name": "java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el6_10.x86_64",
"product_id": "java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el6_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-openjdk-demo@1.8.0.181-3.b13.el6_10?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el6_10.x86_64",
"product": {
"name": "java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el6_10.x86_64",
"product_id": "java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el6_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-openjdk-debug@1.8.0.181-3.b13.el6_10?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el6_10.x86_64",
"product": {
"name": "java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el6_10.x86_64",
"product_id": "java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el6_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-openjdk-headless-debug@1.8.0.181-3.b13.el6_10?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el6_10.x86_64",
"product": {
"name": "java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el6_10.x86_64",
"product_id": "java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el6_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-openjdk-devel-debug@1.8.0.181-3.b13.el6_10?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el6_10.x86_64",
"product": {
"name": "java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el6_10.x86_64",
"product_id": "java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el6_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-openjdk-src@1.8.0.181-3.b13.el6_10?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el6_10.x86_64",
"product": {
"name": "java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el6_10.x86_64",
"product_id": "java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el6_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-openjdk-demo-debug@1.8.0.181-3.b13.el6_10?arch=x86_64\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el6_10.i686",
"product": {
"name": "java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el6_10.i686",
"product_id": "java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el6_10.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-openjdk-debuginfo@1.8.0.181-3.b13.el6_10?arch=i686\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el6_10.i686",
"product": {
"name": "java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el6_10.i686",
"product_id": "java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el6_10.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-openjdk-headless@1.8.0.181-3.b13.el6_10?arch=i686\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-openjdk-1:1.8.0.181-3.b13.el6_10.i686",
"product": {
"name": "java-1.8.0-openjdk-1:1.8.0.181-3.b13.el6_10.i686",
"product_id": "java-1.8.0-openjdk-1:1.8.0.181-3.b13.el6_10.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-openjdk@1.8.0.181-3.b13.el6_10?arch=i686\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el6_10.i686",
"product": {
"name": "java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el6_10.i686",
"product_id": "java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el6_10.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-openjdk-src-debug@1.8.0.181-3.b13.el6_10?arch=i686\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el6_10.i686",
"product": {
"name": "java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el6_10.i686",
"product_id": "java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el6_10.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-openjdk-devel@1.8.0.181-3.b13.el6_10?arch=i686\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el6_10.i686",
"product": {
"name": "java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el6_10.i686",
"product_id": "java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el6_10.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-openjdk-demo@1.8.0.181-3.b13.el6_10?arch=i686\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el6_10.i686",
"product": {
"name": "java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el6_10.i686",
"product_id": "java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el6_10.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-openjdk-debug@1.8.0.181-3.b13.el6_10?arch=i686\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el6_10.i686",
"product": {
"name": "java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el6_10.i686",
"product_id": "java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el6_10.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-openjdk-headless-debug@1.8.0.181-3.b13.el6_10?arch=i686\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el6_10.i686",
"product": {
"name": "java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el6_10.i686",
"product_id": "java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el6_10.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-openjdk-devel-debug@1.8.0.181-3.b13.el6_10?arch=i686\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el6_10.i686",
"product": {
"name": "java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el6_10.i686",
"product_id": "java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el6_10.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-openjdk-src@1.8.0.181-3.b13.el6_10?arch=i686\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el6_10.i686",
"product": {
"name": "java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el6_10.i686",
"product_id": "java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el6_10.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-openjdk-demo-debug@1.8.0.181-3.b13.el6_10?arch=i686\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "i686"
},
{
"branches": [
{
"category": "product_version",
"name": "java-1.8.0-openjdk-1:1.8.0.181-3.b13.el6_10.src",
"product": {
"name": "java-1.8.0-openjdk-1:1.8.0.181-3.b13.el6_10.src",
"product_id": "java-1.8.0-openjdk-1:1.8.0.181-3.b13.el6_10.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-openjdk@1.8.0.181-3.b13.el6_10?arch=src\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "java-1.8.0-openjdk-javadoc-debug-1:1.8.0.181-3.b13.el6_10.noarch",
"product": {
"name": "java-1.8.0-openjdk-javadoc-debug-1:1.8.0.181-3.b13.el6_10.noarch",
"product_id": "java-1.8.0-openjdk-javadoc-debug-1:1.8.0.181-3.b13.el6_10.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-openjdk-javadoc-debug@1.8.0.181-3.b13.el6_10?arch=noarch\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-openjdk-javadoc-1:1.8.0.181-3.b13.el6_10.noarch",
"product": {
"name": "java-1.8.0-openjdk-javadoc-1:1.8.0.181-3.b13.el6_10.noarch",
"product_id": "java-1.8.0-openjdk-javadoc-1:1.8.0.181-3.b13.el6_10.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-openjdk-javadoc@1.8.0.181-3.b13.el6_10?arch=noarch\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "noarch"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-1:1.8.0.181-3.b13.el6_10.i686 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client-6.10.z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el6_10.i686"
},
"product_reference": "java-1.8.0-openjdk-1:1.8.0.181-3.b13.el6_10.i686",
"relates_to_product_reference": "6Client-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-1:1.8.0.181-3.b13.el6_10.src as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client-6.10.z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el6_10.src"
},
"product_reference": "java-1.8.0-openjdk-1:1.8.0.181-3.b13.el6_10.src",
"relates_to_product_reference": "6Client-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-1:1.8.0.181-3.b13.el6_10.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client-6.10.z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el6_10.x86_64"
},
"product_reference": "java-1.8.0-openjdk-1:1.8.0.181-3.b13.el6_10.x86_64",
"relates_to_product_reference": "6Client-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el6_10.i686 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client-6.10.z:java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el6_10.i686"
},
"product_reference": "java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el6_10.i686",
"relates_to_product_reference": "6Client-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el6_10.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client-6.10.z:java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el6_10.x86_64"
},
"product_reference": "java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el6_10.x86_64",
"relates_to_product_reference": "6Client-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el6_10.i686 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client-6.10.z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el6_10.i686"
},
"product_reference": "java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el6_10.i686",
"relates_to_product_reference": "6Client-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el6_10.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client-6.10.z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el6_10.x86_64"
},
"product_reference": "java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el6_10.x86_64",
"relates_to_product_reference": "6Client-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el6_10.i686 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client-6.10.z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el6_10.i686"
},
"product_reference": "java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el6_10.i686",
"relates_to_product_reference": "6Client-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el6_10.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client-6.10.z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el6_10.x86_64"
},
"product_reference": "java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el6_10.x86_64",
"relates_to_product_reference": "6Client-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el6_10.i686 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client-6.10.z:java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el6_10.i686"
},
"product_reference": "java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el6_10.i686",
"relates_to_product_reference": "6Client-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el6_10.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client-6.10.z:java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el6_10.x86_64"
},
"product_reference": "java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el6_10.x86_64",
"relates_to_product_reference": "6Client-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el6_10.i686 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client-6.10.z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el6_10.i686"
},
"product_reference": "java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el6_10.i686",
"relates_to_product_reference": "6Client-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el6_10.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client-6.10.z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el6_10.x86_64"
},
"product_reference": "java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el6_10.x86_64",
"relates_to_product_reference": "6Client-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el6_10.i686 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client-6.10.z:java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el6_10.i686"
},
"product_reference": "java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el6_10.i686",
"relates_to_product_reference": "6Client-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el6_10.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client-6.10.z:java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el6_10.x86_64"
},
"product_reference": "java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el6_10.x86_64",
"relates_to_product_reference": "6Client-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el6_10.i686 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client-6.10.z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el6_10.i686"
},
"product_reference": "java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el6_10.i686",
"relates_to_product_reference": "6Client-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el6_10.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client-6.10.z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el6_10.x86_64"
},
"product_reference": "java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el6_10.x86_64",
"relates_to_product_reference": "6Client-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el6_10.i686 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client-6.10.z:java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el6_10.i686"
},
"product_reference": "java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el6_10.i686",
"relates_to_product_reference": "6Client-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el6_10.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client-6.10.z:java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el6_10.x86_64"
},
"product_reference": "java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el6_10.x86_64",
"relates_to_product_reference": "6Client-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-javadoc-1:1.8.0.181-3.b13.el6_10.noarch as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client-6.10.z:java-1.8.0-openjdk-javadoc-1:1.8.0.181-3.b13.el6_10.noarch"
},
"product_reference": "java-1.8.0-openjdk-javadoc-1:1.8.0.181-3.b13.el6_10.noarch",
"relates_to_product_reference": "6Client-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-javadoc-debug-1:1.8.0.181-3.b13.el6_10.noarch as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client-6.10.z:java-1.8.0-openjdk-javadoc-debug-1:1.8.0.181-3.b13.el6_10.noarch"
},
"product_reference": "java-1.8.0-openjdk-javadoc-debug-1:1.8.0.181-3.b13.el6_10.noarch",
"relates_to_product_reference": "6Client-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el6_10.i686 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client-6.10.z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el6_10.i686"
},
"product_reference": "java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el6_10.i686",
"relates_to_product_reference": "6Client-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el6_10.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client-6.10.z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el6_10.x86_64"
},
"product_reference": "java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el6_10.x86_64",
"relates_to_product_reference": "6Client-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el6_10.i686 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client-6.10.z:java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el6_10.i686"
},
"product_reference": "java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el6_10.i686",
"relates_to_product_reference": "6Client-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el6_10.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client-6.10.z:java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el6_10.x86_64"
},
"product_reference": "java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el6_10.x86_64",
"relates_to_product_reference": "6Client-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-1:1.8.0.181-3.b13.el6_10.i686 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
"product_id": "6Client-optional-6.10.z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el6_10.i686"
},
"product_reference": "java-1.8.0-openjdk-1:1.8.0.181-3.b13.el6_10.i686",
"relates_to_product_reference": "6Client-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-1:1.8.0.181-3.b13.el6_10.src as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
"product_id": "6Client-optional-6.10.z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el6_10.src"
},
"product_reference": "java-1.8.0-openjdk-1:1.8.0.181-3.b13.el6_10.src",
"relates_to_product_reference": "6Client-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-1:1.8.0.181-3.b13.el6_10.x86_64 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
"product_id": "6Client-optional-6.10.z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el6_10.x86_64"
},
"product_reference": "java-1.8.0-openjdk-1:1.8.0.181-3.b13.el6_10.x86_64",
"relates_to_product_reference": "6Client-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el6_10.i686 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
"product_id": "6Client-optional-6.10.z:java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el6_10.i686"
},
"product_reference": "java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el6_10.i686",
"relates_to_product_reference": "6Client-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el6_10.x86_64 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
"product_id": "6Client-optional-6.10.z:java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el6_10.x86_64"
},
"product_reference": "java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el6_10.x86_64",
"relates_to_product_reference": "6Client-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el6_10.i686 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
"product_id": "6Client-optional-6.10.z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el6_10.i686"
},
"product_reference": "java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el6_10.i686",
"relates_to_product_reference": "6Client-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el6_10.x86_64 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
"product_id": "6Client-optional-6.10.z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el6_10.x86_64"
},
"product_reference": "java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el6_10.x86_64",
"relates_to_product_reference": "6Client-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el6_10.i686 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
"product_id": "6Client-optional-6.10.z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el6_10.i686"
},
"product_reference": "java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el6_10.i686",
"relates_to_product_reference": "6Client-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el6_10.x86_64 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
"product_id": "6Client-optional-6.10.z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el6_10.x86_64"
},
"product_reference": "java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el6_10.x86_64",
"relates_to_product_reference": "6Client-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el6_10.i686 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
"product_id": "6Client-optional-6.10.z:java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el6_10.i686"
},
"product_reference": "java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el6_10.i686",
"relates_to_product_reference": "6Client-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el6_10.x86_64 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
"product_id": "6Client-optional-6.10.z:java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el6_10.x86_64"
},
"product_reference": "java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el6_10.x86_64",
"relates_to_product_reference": "6Client-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el6_10.i686 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
"product_id": "6Client-optional-6.10.z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el6_10.i686"
},
"product_reference": "java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el6_10.i686",
"relates_to_product_reference": "6Client-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el6_10.x86_64 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
"product_id": "6Client-optional-6.10.z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el6_10.x86_64"
},
"product_reference": "java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el6_10.x86_64",
"relates_to_product_reference": "6Client-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el6_10.i686 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
"product_id": "6Client-optional-6.10.z:java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el6_10.i686"
},
"product_reference": "java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el6_10.i686",
"relates_to_product_reference": "6Client-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el6_10.x86_64 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
"product_id": "6Client-optional-6.10.z:java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el6_10.x86_64"
},
"product_reference": "java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el6_10.x86_64",
"relates_to_product_reference": "6Client-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el6_10.i686 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
"product_id": "6Client-optional-6.10.z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el6_10.i686"
},
"product_reference": "java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el6_10.i686",
"relates_to_product_reference": "6Client-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el6_10.x86_64 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
"product_id": "6Client-optional-6.10.z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el6_10.x86_64"
},
"product_reference": "java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el6_10.x86_64",
"relates_to_product_reference": "6Client-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el6_10.i686 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
"product_id": "6Client-optional-6.10.z:java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el6_10.i686"
},
"product_reference": "java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el6_10.i686",
"relates_to_product_reference": "6Client-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el6_10.x86_64 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
"product_id": "6Client-optional-6.10.z:java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el6_10.x86_64"
},
"product_reference": "java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el6_10.x86_64",
"relates_to_product_reference": "6Client-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-javadoc-1:1.8.0.181-3.b13.el6_10.noarch as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
"product_id": "6Client-optional-6.10.z:java-1.8.0-openjdk-javadoc-1:1.8.0.181-3.b13.el6_10.noarch"
},
"product_reference": "java-1.8.0-openjdk-javadoc-1:1.8.0.181-3.b13.el6_10.noarch",
"relates_to_product_reference": "6Client-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-javadoc-debug-1:1.8.0.181-3.b13.el6_10.noarch as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
"product_id": "6Client-optional-6.10.z:java-1.8.0-openjdk-javadoc-debug-1:1.8.0.181-3.b13.el6_10.noarch"
},
"product_reference": "java-1.8.0-openjdk-javadoc-debug-1:1.8.0.181-3.b13.el6_10.noarch",
"relates_to_product_reference": "6Client-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el6_10.i686 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
"product_id": "6Client-optional-6.10.z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el6_10.i686"
},
"product_reference": "java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el6_10.i686",
"relates_to_product_reference": "6Client-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el6_10.x86_64 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
"product_id": "6Client-optional-6.10.z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el6_10.x86_64"
},
"product_reference": "java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el6_10.x86_64",
"relates_to_product_reference": "6Client-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el6_10.i686 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
"product_id": "6Client-optional-6.10.z:java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el6_10.i686"
},
"product_reference": "java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el6_10.i686",
"relates_to_product_reference": "6Client-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el6_10.x86_64 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
"product_id": "6Client-optional-6.10.z:java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el6_10.x86_64"
},
"product_reference": "java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el6_10.x86_64",
"relates_to_product_reference": "6Client-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-1:1.8.0.181-3.b13.el6_10.i686 as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
"product_id": "6ComputeNode-6.10.z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el6_10.i686"
},
"product_reference": "java-1.8.0-openjdk-1:1.8.0.181-3.b13.el6_10.i686",
"relates_to_product_reference": "6ComputeNode-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-1:1.8.0.181-3.b13.el6_10.src as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
"product_id": "6ComputeNode-6.10.z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el6_10.src"
},
"product_reference": "java-1.8.0-openjdk-1:1.8.0.181-3.b13.el6_10.src",
"relates_to_product_reference": "6ComputeNode-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-1:1.8.0.181-3.b13.el6_10.x86_64 as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
"product_id": "6ComputeNode-6.10.z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el6_10.x86_64"
},
"product_reference": "java-1.8.0-openjdk-1:1.8.0.181-3.b13.el6_10.x86_64",
"relates_to_product_reference": "6ComputeNode-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el6_10.i686 as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
"product_id": "6ComputeNode-6.10.z:java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el6_10.i686"
},
"product_reference": "java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el6_10.i686",
"relates_to_product_reference": "6ComputeNode-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el6_10.x86_64 as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
"product_id": "6ComputeNode-6.10.z:java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el6_10.x86_64"
},
"product_reference": "java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el6_10.x86_64",
"relates_to_product_reference": "6ComputeNode-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el6_10.i686 as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
"product_id": "6ComputeNode-6.10.z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el6_10.i686"
},
"product_reference": "java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el6_10.i686",
"relates_to_product_reference": "6ComputeNode-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el6_10.x86_64 as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
"product_id": "6ComputeNode-6.10.z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el6_10.x86_64"
},
"product_reference": "java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el6_10.x86_64",
"relates_to_product_reference": "6ComputeNode-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el6_10.i686 as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
"product_id": "6ComputeNode-6.10.z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el6_10.i686"
},
"product_reference": "java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el6_10.i686",
"relates_to_product_reference": "6ComputeNode-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el6_10.x86_64 as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
"product_id": "6ComputeNode-6.10.z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el6_10.x86_64"
},
"product_reference": "java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el6_10.x86_64",
"relates_to_product_reference": "6ComputeNode-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el6_10.i686 as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
"product_id": "6ComputeNode-6.10.z:java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el6_10.i686"
},
"product_reference": "java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el6_10.i686",
"relates_to_product_reference": "6ComputeNode-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el6_10.x86_64 as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
"product_id": "6ComputeNode-6.10.z:java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el6_10.x86_64"
},
"product_reference": "java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el6_10.x86_64",
"relates_to_product_reference": "6ComputeNode-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el6_10.i686 as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
"product_id": "6ComputeNode-6.10.z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el6_10.i686"
},
"product_reference": "java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el6_10.i686",
"relates_to_product_reference": "6ComputeNode-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el6_10.x86_64 as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
"product_id": "6ComputeNode-6.10.z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el6_10.x86_64"
},
"product_reference": "java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el6_10.x86_64",
"relates_to_product_reference": "6ComputeNode-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el6_10.i686 as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
"product_id": "6ComputeNode-6.10.z:java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el6_10.i686"
},
"product_reference": "java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el6_10.i686",
"relates_to_product_reference": "6ComputeNode-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el6_10.x86_64 as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
"product_id": "6ComputeNode-6.10.z:java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el6_10.x86_64"
},
"product_reference": "java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el6_10.x86_64",
"relates_to_product_reference": "6ComputeNode-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el6_10.i686 as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
"product_id": "6ComputeNode-6.10.z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el6_10.i686"
},
"product_reference": "java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el6_10.i686",
"relates_to_product_reference": "6ComputeNode-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el6_10.x86_64 as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
"product_id": "6ComputeNode-6.10.z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el6_10.x86_64"
},
"product_reference": "java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el6_10.x86_64",
"relates_to_product_reference": "6ComputeNode-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el6_10.i686 as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
"product_id": "6ComputeNode-6.10.z:java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el6_10.i686"
},
"product_reference": "java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el6_10.i686",
"relates_to_product_reference": "6ComputeNode-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el6_10.x86_64 as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
"product_id": "6ComputeNode-6.10.z:java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el6_10.x86_64"
},
"product_reference": "java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el6_10.x86_64",
"relates_to_product_reference": "6ComputeNode-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-javadoc-1:1.8.0.181-3.b13.el6_10.noarch as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
"product_id": "6ComputeNode-6.10.z:java-1.8.0-openjdk-javadoc-1:1.8.0.181-3.b13.el6_10.noarch"
},
"product_reference": "java-1.8.0-openjdk-javadoc-1:1.8.0.181-3.b13.el6_10.noarch",
"relates_to_product_reference": "6ComputeNode-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-javadoc-debug-1:1.8.0.181-3.b13.el6_10.noarch as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
"product_id": "6ComputeNode-6.10.z:java-1.8.0-openjdk-javadoc-debug-1:1.8.0.181-3.b13.el6_10.noarch"
},
"product_reference": "java-1.8.0-openjdk-javadoc-debug-1:1.8.0.181-3.b13.el6_10.noarch",
"relates_to_product_reference": "6ComputeNode-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el6_10.i686 as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
"product_id": "6ComputeNode-6.10.z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el6_10.i686"
},
"product_reference": "java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el6_10.i686",
"relates_to_product_reference": "6ComputeNode-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el6_10.x86_64 as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
"product_id": "6ComputeNode-6.10.z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el6_10.x86_64"
},
"product_reference": "java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el6_10.x86_64",
"relates_to_product_reference": "6ComputeNode-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el6_10.i686 as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
"product_id": "6ComputeNode-6.10.z:java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el6_10.i686"
},
"product_reference": "java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el6_10.i686",
"relates_to_product_reference": "6ComputeNode-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el6_10.x86_64 as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
"product_id": "6ComputeNode-6.10.z:java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el6_10.x86_64"
},
"product_reference": "java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el6_10.x86_64",
"relates_to_product_reference": "6ComputeNode-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-1:1.8.0.181-3.b13.el6_10.i686 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
"product_id": "6ComputeNode-optional-6.10.z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el6_10.i686"
},
"product_reference": "java-1.8.0-openjdk-1:1.8.0.181-3.b13.el6_10.i686",
"relates_to_product_reference": "6ComputeNode-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-1:1.8.0.181-3.b13.el6_10.src as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
"product_id": "6ComputeNode-optional-6.10.z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el6_10.src"
},
"product_reference": "java-1.8.0-openjdk-1:1.8.0.181-3.b13.el6_10.src",
"relates_to_product_reference": "6ComputeNode-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-1:1.8.0.181-3.b13.el6_10.x86_64 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
"product_id": "6ComputeNode-optional-6.10.z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el6_10.x86_64"
},
"product_reference": "java-1.8.0-openjdk-1:1.8.0.181-3.b13.el6_10.x86_64",
"relates_to_product_reference": "6ComputeNode-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el6_10.i686 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
"product_id": "6ComputeNode-optional-6.10.z:java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el6_10.i686"
},
"product_reference": "java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el6_10.i686",
"relates_to_product_reference": "6ComputeNode-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el6_10.x86_64 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
"product_id": "6ComputeNode-optional-6.10.z:java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el6_10.x86_64"
},
"product_reference": "java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el6_10.x86_64",
"relates_to_product_reference": "6ComputeNode-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el6_10.i686 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
"product_id": "6ComputeNode-optional-6.10.z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el6_10.i686"
},
"product_reference": "java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el6_10.i686",
"relates_to_product_reference": "6ComputeNode-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el6_10.x86_64 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
"product_id": "6ComputeNode-optional-6.10.z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el6_10.x86_64"
},
"product_reference": "java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el6_10.x86_64",
"relates_to_product_reference": "6ComputeNode-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el6_10.i686 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
"product_id": "6ComputeNode-optional-6.10.z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el6_10.i686"
},
"product_reference": "java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el6_10.i686",
"relates_to_product_reference": "6ComputeNode-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el6_10.x86_64 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
"product_id": "6ComputeNode-optional-6.10.z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el6_10.x86_64"
},
"product_reference": "java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el6_10.x86_64",
"relates_to_product_reference": "6ComputeNode-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el6_10.i686 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
"product_id": "6ComputeNode-optional-6.10.z:java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el6_10.i686"
},
"product_reference": "java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el6_10.i686",
"relates_to_product_reference": "6ComputeNode-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el6_10.x86_64 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
"product_id": "6ComputeNode-optional-6.10.z:java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el6_10.x86_64"
},
"product_reference": "java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el6_10.x86_64",
"relates_to_product_reference": "6ComputeNode-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el6_10.i686 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
"product_id": "6ComputeNode-optional-6.10.z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el6_10.i686"
},
"product_reference": "java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el6_10.i686",
"relates_to_product_reference": "6ComputeNode-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el6_10.x86_64 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
"product_id": "6ComputeNode-optional-6.10.z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el6_10.x86_64"
},
"product_reference": "java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el6_10.x86_64",
"relates_to_product_reference": "6ComputeNode-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el6_10.i686 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
"product_id": "6ComputeNode-optional-6.10.z:java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el6_10.i686"
},
"product_reference": "java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el6_10.i686",
"relates_to_product_reference": "6ComputeNode-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el6_10.x86_64 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
"product_id": "6ComputeNode-optional-6.10.z:java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el6_10.x86_64"
},
"product_reference": "java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el6_10.x86_64",
"relates_to_product_reference": "6ComputeNode-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el6_10.i686 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
"product_id": "6ComputeNode-optional-6.10.z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el6_10.i686"
},
"product_reference": "java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el6_10.i686",
"relates_to_product_reference": "6ComputeNode-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el6_10.x86_64 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
"product_id": "6ComputeNode-optional-6.10.z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el6_10.x86_64"
},
"product_reference": "java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el6_10.x86_64",
"relates_to_product_reference": "6ComputeNode-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el6_10.i686 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
"product_id": "6ComputeNode-optional-6.10.z:java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el6_10.i686"
},
"product_reference": "java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el6_10.i686",
"relates_to_product_reference": "6ComputeNode-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el6_10.x86_64 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
"product_id": "6ComputeNode-optional-6.10.z:java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el6_10.x86_64"
},
"product_reference": "java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el6_10.x86_64",
"relates_to_product_reference": "6ComputeNode-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-javadoc-1:1.8.0.181-3.b13.el6_10.noarch as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
"product_id": "6ComputeNode-optional-6.10.z:java-1.8.0-openjdk-javadoc-1:1.8.0.181-3.b13.el6_10.noarch"
},
"product_reference": "java-1.8.0-openjdk-javadoc-1:1.8.0.181-3.b13.el6_10.noarch",
"relates_to_product_reference": "6ComputeNode-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-javadoc-debug-1:1.8.0.181-3.b13.el6_10.noarch as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
"product_id": "6ComputeNode-optional-6.10.z:java-1.8.0-openjdk-javadoc-debug-1:1.8.0.181-3.b13.el6_10.noarch"
},
"product_reference": "java-1.8.0-openjdk-javadoc-debug-1:1.8.0.181-3.b13.el6_10.noarch",
"relates_to_product_reference": "6ComputeNode-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el6_10.i686 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
"product_id": "6ComputeNode-optional-6.10.z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el6_10.i686"
},
"product_reference": "java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el6_10.i686",
"relates_to_product_reference": "6ComputeNode-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el6_10.x86_64 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
"product_id": "6ComputeNode-optional-6.10.z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el6_10.x86_64"
},
"product_reference": "java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el6_10.x86_64",
"relates_to_product_reference": "6ComputeNode-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el6_10.i686 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
"product_id": "6ComputeNode-optional-6.10.z:java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el6_10.i686"
},
"product_reference": "java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el6_10.i686",
"relates_to_product_reference": "6ComputeNode-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el6_10.x86_64 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
"product_id": "6ComputeNode-optional-6.10.z:java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el6_10.x86_64"
},
"product_reference": "java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el6_10.x86_64",
"relates_to_product_reference": "6ComputeNode-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-1:1.8.0.181-3.b13.el6_10.i686 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.10.z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el6_10.i686"
},
"product_reference": "java-1.8.0-openjdk-1:1.8.0.181-3.b13.el6_10.i686",
"relates_to_product_reference": "6Server-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-1:1.8.0.181-3.b13.el6_10.src as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.10.z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el6_10.src"
},
"product_reference": "java-1.8.0-openjdk-1:1.8.0.181-3.b13.el6_10.src",
"relates_to_product_reference": "6Server-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-1:1.8.0.181-3.b13.el6_10.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.10.z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el6_10.x86_64"
},
"product_reference": "java-1.8.0-openjdk-1:1.8.0.181-3.b13.el6_10.x86_64",
"relates_to_product_reference": "6Server-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el6_10.i686 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.10.z:java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el6_10.i686"
},
"product_reference": "java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el6_10.i686",
"relates_to_product_reference": "6Server-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el6_10.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.10.z:java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el6_10.x86_64"
},
"product_reference": "java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el6_10.x86_64",
"relates_to_product_reference": "6Server-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el6_10.i686 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.10.z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el6_10.i686"
},
"product_reference": "java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el6_10.i686",
"relates_to_product_reference": "6Server-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el6_10.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.10.z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el6_10.x86_64"
},
"product_reference": "java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el6_10.x86_64",
"relates_to_product_reference": "6Server-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el6_10.i686 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.10.z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el6_10.i686"
},
"product_reference": "java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el6_10.i686",
"relates_to_product_reference": "6Server-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el6_10.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.10.z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el6_10.x86_64"
},
"product_reference": "java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el6_10.x86_64",
"relates_to_product_reference": "6Server-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el6_10.i686 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.10.z:java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el6_10.i686"
},
"product_reference": "java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el6_10.i686",
"relates_to_product_reference": "6Server-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el6_10.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.10.z:java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el6_10.x86_64"
},
"product_reference": "java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el6_10.x86_64",
"relates_to_product_reference": "6Server-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el6_10.i686 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.10.z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el6_10.i686"
},
"product_reference": "java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el6_10.i686",
"relates_to_product_reference": "6Server-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el6_10.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.10.z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el6_10.x86_64"
},
"product_reference": "java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el6_10.x86_64",
"relates_to_product_reference": "6Server-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el6_10.i686 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.10.z:java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el6_10.i686"
},
"product_reference": "java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el6_10.i686",
"relates_to_product_reference": "6Server-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el6_10.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.10.z:java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el6_10.x86_64"
},
"product_reference": "java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el6_10.x86_64",
"relates_to_product_reference": "6Server-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el6_10.i686 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.10.z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el6_10.i686"
},
"product_reference": "java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el6_10.i686",
"relates_to_product_reference": "6Server-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el6_10.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.10.z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el6_10.x86_64"
},
"product_reference": "java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el6_10.x86_64",
"relates_to_product_reference": "6Server-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el6_10.i686 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.10.z:java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el6_10.i686"
},
"product_reference": "java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el6_10.i686",
"relates_to_product_reference": "6Server-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el6_10.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.10.z:java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el6_10.x86_64"
},
"product_reference": "java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el6_10.x86_64",
"relates_to_product_reference": "6Server-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-javadoc-1:1.8.0.181-3.b13.el6_10.noarch as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.10.z:java-1.8.0-openjdk-javadoc-1:1.8.0.181-3.b13.el6_10.noarch"
},
"product_reference": "java-1.8.0-openjdk-javadoc-1:1.8.0.181-3.b13.el6_10.noarch",
"relates_to_product_reference": "6Server-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-javadoc-debug-1:1.8.0.181-3.b13.el6_10.noarch as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.10.z:java-1.8.0-openjdk-javadoc-debug-1:1.8.0.181-3.b13.el6_10.noarch"
},
"product_reference": "java-1.8.0-openjdk-javadoc-debug-1:1.8.0.181-3.b13.el6_10.noarch",
"relates_to_product_reference": "6Server-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el6_10.i686 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.10.z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el6_10.i686"
},
"product_reference": "java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el6_10.i686",
"relates_to_product_reference": "6Server-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el6_10.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.10.z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el6_10.x86_64"
},
"product_reference": "java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el6_10.x86_64",
"relates_to_product_reference": "6Server-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el6_10.i686 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.10.z:java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el6_10.i686"
},
"product_reference": "java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el6_10.i686",
"relates_to_product_reference": "6Server-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el6_10.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.10.z:java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el6_10.x86_64"
},
"product_reference": "java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el6_10.x86_64",
"relates_to_product_reference": "6Server-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-1:1.8.0.181-3.b13.el6_10.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional-6.10.z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el6_10.i686"
},
"product_reference": "java-1.8.0-openjdk-1:1.8.0.181-3.b13.el6_10.i686",
"relates_to_product_reference": "6Server-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-1:1.8.0.181-3.b13.el6_10.src as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional-6.10.z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el6_10.src"
},
"product_reference": "java-1.8.0-openjdk-1:1.8.0.181-3.b13.el6_10.src",
"relates_to_product_reference": "6Server-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-1:1.8.0.181-3.b13.el6_10.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional-6.10.z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el6_10.x86_64"
},
"product_reference": "java-1.8.0-openjdk-1:1.8.0.181-3.b13.el6_10.x86_64",
"relates_to_product_reference": "6Server-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el6_10.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional-6.10.z:java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el6_10.i686"
},
"product_reference": "java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el6_10.i686",
"relates_to_product_reference": "6Server-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el6_10.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional-6.10.z:java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el6_10.x86_64"
},
"product_reference": "java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el6_10.x86_64",
"relates_to_product_reference": "6Server-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el6_10.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional-6.10.z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el6_10.i686"
},
"product_reference": "java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el6_10.i686",
"relates_to_product_reference": "6Server-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el6_10.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional-6.10.z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el6_10.x86_64"
},
"product_reference": "java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el6_10.x86_64",
"relates_to_product_reference": "6Server-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el6_10.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional-6.10.z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el6_10.i686"
},
"product_reference": "java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el6_10.i686",
"relates_to_product_reference": "6Server-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el6_10.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional-6.10.z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el6_10.x86_64"
},
"product_reference": "java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el6_10.x86_64",
"relates_to_product_reference": "6Server-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el6_10.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional-6.10.z:java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el6_10.i686"
},
"product_reference": "java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el6_10.i686",
"relates_to_product_reference": "6Server-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el6_10.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional-6.10.z:java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el6_10.x86_64"
},
"product_reference": "java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el6_10.x86_64",
"relates_to_product_reference": "6Server-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el6_10.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional-6.10.z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el6_10.i686"
},
"product_reference": "java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el6_10.i686",
"relates_to_product_reference": "6Server-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el6_10.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional-6.10.z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el6_10.x86_64"
},
"product_reference": "java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el6_10.x86_64",
"relates_to_product_reference": "6Server-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el6_10.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional-6.10.z:java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el6_10.i686"
},
"product_reference": "java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el6_10.i686",
"relates_to_product_reference": "6Server-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el6_10.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional-6.10.z:java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el6_10.x86_64"
},
"product_reference": "java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el6_10.x86_64",
"relates_to_product_reference": "6Server-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el6_10.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional-6.10.z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el6_10.i686"
},
"product_reference": "java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el6_10.i686",
"relates_to_product_reference": "6Server-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el6_10.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional-6.10.z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el6_10.x86_64"
},
"product_reference": "java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el6_10.x86_64",
"relates_to_product_reference": "6Server-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el6_10.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional-6.10.z:java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el6_10.i686"
},
"product_reference": "java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el6_10.i686",
"relates_to_product_reference": "6Server-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el6_10.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional-6.10.z:java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el6_10.x86_64"
},
"product_reference": "java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el6_10.x86_64",
"relates_to_product_reference": "6Server-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-javadoc-1:1.8.0.181-3.b13.el6_10.noarch as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional-6.10.z:java-1.8.0-openjdk-javadoc-1:1.8.0.181-3.b13.el6_10.noarch"
},
"product_reference": "java-1.8.0-openjdk-javadoc-1:1.8.0.181-3.b13.el6_10.noarch",
"relates_to_product_reference": "6Server-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-javadoc-debug-1:1.8.0.181-3.b13.el6_10.noarch as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional-6.10.z:java-1.8.0-openjdk-javadoc-debug-1:1.8.0.181-3.b13.el6_10.noarch"
},
"product_reference": "java-1.8.0-openjdk-javadoc-debug-1:1.8.0.181-3.b13.el6_10.noarch",
"relates_to_product_reference": "6Server-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el6_10.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional-6.10.z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el6_10.i686"
},
"product_reference": "java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el6_10.i686",
"relates_to_product_reference": "6Server-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el6_10.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional-6.10.z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el6_10.x86_64"
},
"product_reference": "java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el6_10.x86_64",
"relates_to_product_reference": "6Server-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el6_10.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional-6.10.z:java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el6_10.i686"
},
"product_reference": "java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el6_10.i686",
"relates_to_product_reference": "6Server-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el6_10.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional-6.10.z:java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el6_10.x86_64"
},
"product_reference": "java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el6_10.x86_64",
"relates_to_product_reference": "6Server-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-1:1.8.0.181-3.b13.el6_10.i686 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-6.10.z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el6_10.i686"
},
"product_reference": "java-1.8.0-openjdk-1:1.8.0.181-3.b13.el6_10.i686",
"relates_to_product_reference": "6Workstation-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-1:1.8.0.181-3.b13.el6_10.src as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-6.10.z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el6_10.src"
},
"product_reference": "java-1.8.0-openjdk-1:1.8.0.181-3.b13.el6_10.src",
"relates_to_product_reference": "6Workstation-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-1:1.8.0.181-3.b13.el6_10.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-6.10.z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el6_10.x86_64"
},
"product_reference": "java-1.8.0-openjdk-1:1.8.0.181-3.b13.el6_10.x86_64",
"relates_to_product_reference": "6Workstation-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el6_10.i686 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-6.10.z:java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el6_10.i686"
},
"product_reference": "java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el6_10.i686",
"relates_to_product_reference": "6Workstation-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el6_10.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-6.10.z:java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el6_10.x86_64"
},
"product_reference": "java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el6_10.x86_64",
"relates_to_product_reference": "6Workstation-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el6_10.i686 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-6.10.z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el6_10.i686"
},
"product_reference": "java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el6_10.i686",
"relates_to_product_reference": "6Workstation-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el6_10.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-6.10.z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el6_10.x86_64"
},
"product_reference": "java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el6_10.x86_64",
"relates_to_product_reference": "6Workstation-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el6_10.i686 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-6.10.z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el6_10.i686"
},
"product_reference": "java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el6_10.i686",
"relates_to_product_reference": "6Workstation-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el6_10.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-6.10.z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el6_10.x86_64"
},
"product_reference": "java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el6_10.x86_64",
"relates_to_product_reference": "6Workstation-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el6_10.i686 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-6.10.z:java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el6_10.i686"
},
"product_reference": "java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el6_10.i686",
"relates_to_product_reference": "6Workstation-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el6_10.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-6.10.z:java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el6_10.x86_64"
},
"product_reference": "java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el6_10.x86_64",
"relates_to_product_reference": "6Workstation-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el6_10.i686 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-6.10.z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el6_10.i686"
},
"product_reference": "java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el6_10.i686",
"relates_to_product_reference": "6Workstation-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el6_10.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-6.10.z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el6_10.x86_64"
},
"product_reference": "java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el6_10.x86_64",
"relates_to_product_reference": "6Workstation-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el6_10.i686 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-6.10.z:java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el6_10.i686"
},
"product_reference": "java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el6_10.i686",
"relates_to_product_reference": "6Workstation-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el6_10.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-6.10.z:java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el6_10.x86_64"
},
"product_reference": "java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el6_10.x86_64",
"relates_to_product_reference": "6Workstation-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el6_10.i686 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-6.10.z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el6_10.i686"
},
"product_reference": "java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el6_10.i686",
"relates_to_product_reference": "6Workstation-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el6_10.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-6.10.z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el6_10.x86_64"
},
"product_reference": "java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el6_10.x86_64",
"relates_to_product_reference": "6Workstation-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el6_10.i686 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-6.10.z:java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el6_10.i686"
},
"product_reference": "java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el6_10.i686",
"relates_to_product_reference": "6Workstation-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el6_10.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-6.10.z:java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el6_10.x86_64"
},
"product_reference": "java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el6_10.x86_64",
"relates_to_product_reference": "6Workstation-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-javadoc-1:1.8.0.181-3.b13.el6_10.noarch as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-6.10.z:java-1.8.0-openjdk-javadoc-1:1.8.0.181-3.b13.el6_10.noarch"
},
"product_reference": "java-1.8.0-openjdk-javadoc-1:1.8.0.181-3.b13.el6_10.noarch",
"relates_to_product_reference": "6Workstation-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-javadoc-debug-1:1.8.0.181-3.b13.el6_10.noarch as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-6.10.z:java-1.8.0-openjdk-javadoc-debug-1:1.8.0.181-3.b13.el6_10.noarch"
},
"product_reference": "java-1.8.0-openjdk-javadoc-debug-1:1.8.0.181-3.b13.el6_10.noarch",
"relates_to_product_reference": "6Workstation-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el6_10.i686 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-6.10.z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el6_10.i686"
},
"product_reference": "java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el6_10.i686",
"relates_to_product_reference": "6Workstation-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el6_10.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-6.10.z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el6_10.x86_64"
},
"product_reference": "java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el6_10.x86_64",
"relates_to_product_reference": "6Workstation-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el6_10.i686 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-6.10.z:java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el6_10.i686"
},
"product_reference": "java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el6_10.i686",
"relates_to_product_reference": "6Workstation-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el6_10.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-6.10.z:java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el6_10.x86_64"
},
"product_reference": "java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el6_10.x86_64",
"relates_to_product_reference": "6Workstation-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-1:1.8.0.181-3.b13.el6_10.i686 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
"product_id": "6Workstation-optional-6.10.z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el6_10.i686"
},
"product_reference": "java-1.8.0-openjdk-1:1.8.0.181-3.b13.el6_10.i686",
"relates_to_product_reference": "6Workstation-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-1:1.8.0.181-3.b13.el6_10.src as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
"product_id": "6Workstation-optional-6.10.z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el6_10.src"
},
"product_reference": "java-1.8.0-openjdk-1:1.8.0.181-3.b13.el6_10.src",
"relates_to_product_reference": "6Workstation-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-1:1.8.0.181-3.b13.el6_10.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
"product_id": "6Workstation-optional-6.10.z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el6_10.x86_64"
},
"product_reference": "java-1.8.0-openjdk-1:1.8.0.181-3.b13.el6_10.x86_64",
"relates_to_product_reference": "6Workstation-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el6_10.i686 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
"product_id": "6Workstation-optional-6.10.z:java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el6_10.i686"
},
"product_reference": "java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el6_10.i686",
"relates_to_product_reference": "6Workstation-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el6_10.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
"product_id": "6Workstation-optional-6.10.z:java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el6_10.x86_64"
},
"product_reference": "java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el6_10.x86_64",
"relates_to_product_reference": "6Workstation-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el6_10.i686 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
"product_id": "6Workstation-optional-6.10.z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el6_10.i686"
},
"product_reference": "java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el6_10.i686",
"relates_to_product_reference": "6Workstation-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el6_10.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
"product_id": "6Workstation-optional-6.10.z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el6_10.x86_64"
},
"product_reference": "java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el6_10.x86_64",
"relates_to_product_reference": "6Workstation-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el6_10.i686 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
"product_id": "6Workstation-optional-6.10.z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el6_10.i686"
},
"product_reference": "java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el6_10.i686",
"relates_to_product_reference": "6Workstation-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el6_10.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
"product_id": "6Workstation-optional-6.10.z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el6_10.x86_64"
},
"product_reference": "java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el6_10.x86_64",
"relates_to_product_reference": "6Workstation-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el6_10.i686 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
"product_id": "6Workstation-optional-6.10.z:java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el6_10.i686"
},
"product_reference": "java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el6_10.i686",
"relates_to_product_reference": "6Workstation-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el6_10.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
"product_id": "6Workstation-optional-6.10.z:java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el6_10.x86_64"
},
"product_reference": "java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el6_10.x86_64",
"relates_to_product_reference": "6Workstation-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el6_10.i686 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
"product_id": "6Workstation-optional-6.10.z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el6_10.i686"
},
"product_reference": "java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el6_10.i686",
"relates_to_product_reference": "6Workstation-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el6_10.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
"product_id": "6Workstation-optional-6.10.z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el6_10.x86_64"
},
"product_reference": "java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el6_10.x86_64",
"relates_to_product_reference": "6Workstation-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el6_10.i686 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
"product_id": "6Workstation-optional-6.10.z:java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el6_10.i686"
},
"product_reference": "java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el6_10.i686",
"relates_to_product_reference": "6Workstation-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el6_10.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
"product_id": "6Workstation-optional-6.10.z:java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el6_10.x86_64"
},
"product_reference": "java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el6_10.x86_64",
"relates_to_product_reference": "6Workstation-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el6_10.i686 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
"product_id": "6Workstation-optional-6.10.z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el6_10.i686"
},
"product_reference": "java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el6_10.i686",
"relates_to_product_reference": "6Workstation-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el6_10.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
"product_id": "6Workstation-optional-6.10.z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el6_10.x86_64"
},
"product_reference": "java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el6_10.x86_64",
"relates_to_product_reference": "6Workstation-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el6_10.i686 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
"product_id": "6Workstation-optional-6.10.z:java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el6_10.i686"
},
"product_reference": "java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el6_10.i686",
"relates_to_product_reference": "6Workstation-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el6_10.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
"product_id": "6Workstation-optional-6.10.z:java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el6_10.x86_64"
},
"product_reference": "java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el6_10.x86_64",
"relates_to_product_reference": "6Workstation-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-javadoc-1:1.8.0.181-3.b13.el6_10.noarch as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
"product_id": "6Workstation-optional-6.10.z:java-1.8.0-openjdk-javadoc-1:1.8.0.181-3.b13.el6_10.noarch"
},
"product_reference": "java-1.8.0-openjdk-javadoc-1:1.8.0.181-3.b13.el6_10.noarch",
"relates_to_product_reference": "6Workstation-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-javadoc-debug-1:1.8.0.181-3.b13.el6_10.noarch as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
"product_id": "6Workstation-optional-6.10.z:java-1.8.0-openjdk-javadoc-debug-1:1.8.0.181-3.b13.el6_10.noarch"
},
"product_reference": "java-1.8.0-openjdk-javadoc-debug-1:1.8.0.181-3.b13.el6_10.noarch",
"relates_to_product_reference": "6Workstation-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el6_10.i686 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
"product_id": "6Workstation-optional-6.10.z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el6_10.i686"
},
"product_reference": "java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el6_10.i686",
"relates_to_product_reference": "6Workstation-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el6_10.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
"product_id": "6Workstation-optional-6.10.z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el6_10.x86_64"
},
"product_reference": "java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el6_10.x86_64",
"relates_to_product_reference": "6Workstation-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el6_10.i686 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
"product_id": "6Workstation-optional-6.10.z:java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el6_10.i686"
},
"product_reference": "java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el6_10.i686",
"relates_to_product_reference": "6Workstation-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el6_10.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
"product_id": "6Workstation-optional-6.10.z:java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el6_10.x86_64"
},
"product_reference": "java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el6_10.x86_64",
"relates_to_product_reference": "6Workstation-optional-6.10.z"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2018-2952",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2018-07-11T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1600925"
}
],
"notes": [
{
"category": "description",
"text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Concurrency). Supported versions that are affected are Java SE: 6u191, 7u181, 8u172 and 10.0.1; Java SE Embedded: 8u171; JRockit: R28.3.18. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 3.7 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK: insufficient index validation in PatternSyntaxException getMessage() (Concurrency, 8199547)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-6.10.z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el6_10.i686",
"6Client-6.10.z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el6_10.src",
"6Client-6.10.z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el6_10.x86_64",
"6Client-6.10.z:java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el6_10.i686",
"6Client-6.10.z:java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el6_10.x86_64",
"6Client-6.10.z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el6_10.i686",
"6Client-6.10.z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el6_10.x86_64",
"6Client-6.10.z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el6_10.i686",
"6Client-6.10.z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el6_10.x86_64",
"6Client-6.10.z:java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el6_10.i686",
"6Client-6.10.z:java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el6_10.x86_64",
"6Client-6.10.z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el6_10.i686",
"6Client-6.10.z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el6_10.x86_64",
"6Client-6.10.z:java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el6_10.i686",
"6Client-6.10.z:java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el6_10.x86_64",
"6Client-6.10.z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el6_10.i686",
"6Client-6.10.z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el6_10.x86_64",
"6Client-6.10.z:java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el6_10.i686",
"6Client-6.10.z:java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el6_10.x86_64",
"6Client-6.10.z:java-1.8.0-openjdk-javadoc-1:1.8.0.181-3.b13.el6_10.noarch",
"6Client-6.10.z:java-1.8.0-openjdk-javadoc-debug-1:1.8.0.181-3.b13.el6_10.noarch",
"6Client-6.10.z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el6_10.i686",
"6Client-6.10.z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el6_10.x86_64",
"6Client-6.10.z:java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el6_10.i686",
"6Client-6.10.z:java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el6_10.x86_64",
"6Client-optional-6.10.z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el6_10.i686",
"6Client-optional-6.10.z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el6_10.src",
"6Client-optional-6.10.z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el6_10.x86_64",
"6Client-optional-6.10.z:java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el6_10.i686",
"6Client-optional-6.10.z:java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el6_10.x86_64",
"6Client-optional-6.10.z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el6_10.i686",
"6Client-optional-6.10.z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el6_10.x86_64",
"6Client-optional-6.10.z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el6_10.i686",
"6Client-optional-6.10.z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el6_10.x86_64",
"6Client-optional-6.10.z:java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el6_10.i686",
"6Client-optional-6.10.z:java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el6_10.x86_64",
"6Client-optional-6.10.z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el6_10.i686",
"6Client-optional-6.10.z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el6_10.x86_64",
"6Client-optional-6.10.z:java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el6_10.i686",
"6Client-optional-6.10.z:java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el6_10.x86_64",
"6Client-optional-6.10.z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el6_10.i686",
"6Client-optional-6.10.z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el6_10.x86_64",
"6Client-optional-6.10.z:java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el6_10.i686",
"6Client-optional-6.10.z:java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el6_10.x86_64",
"6Client-optional-6.10.z:java-1.8.0-openjdk-javadoc-1:1.8.0.181-3.b13.el6_10.noarch",
"6Client-optional-6.10.z:java-1.8.0-openjdk-javadoc-debug-1:1.8.0.181-3.b13.el6_10.noarch",
"6Client-optional-6.10.z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el6_10.i686",
"6Client-optional-6.10.z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el6_10.x86_64",
"6Client-optional-6.10.z:java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el6_10.i686",
"6Client-optional-6.10.z:java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el6_10.x86_64",
"6ComputeNode-6.10.z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el6_10.i686",
"6ComputeNode-6.10.z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el6_10.src",
"6ComputeNode-6.10.z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el6_10.x86_64",
"6ComputeNode-6.10.z:java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el6_10.i686",
"6ComputeNode-6.10.z:java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el6_10.x86_64",
"6ComputeNode-6.10.z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el6_10.i686",
"6ComputeNode-6.10.z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el6_10.x86_64",
"6ComputeNode-6.10.z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el6_10.i686",
"6ComputeNode-6.10.z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el6_10.x86_64",
"6ComputeNode-6.10.z:java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el6_10.i686",
"6ComputeNode-6.10.z:java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el6_10.x86_64",
"6ComputeNode-6.10.z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el6_10.i686",
"6ComputeNode-6.10.z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el6_10.x86_64",
"6ComputeNode-6.10.z:java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el6_10.i686",
"6ComputeNode-6.10.z:java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el6_10.x86_64",
"6ComputeNode-6.10.z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el6_10.i686",
"6ComputeNode-6.10.z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el6_10.x86_64",
"6ComputeNode-6.10.z:java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el6_10.i686",
"6ComputeNode-6.10.z:java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el6_10.x86_64",
"6ComputeNode-6.10.z:java-1.8.0-openjdk-javadoc-1:1.8.0.181-3.b13.el6_10.noarch",
"6ComputeNode-6.10.z:java-1.8.0-openjdk-javadoc-debug-1:1.8.0.181-3.b13.el6_10.noarch",
"6ComputeNode-6.10.z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el6_10.i686",
"6ComputeNode-6.10.z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el6_10.x86_64",
"6ComputeNode-6.10.z:java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el6_10.i686",
"6ComputeNode-6.10.z:java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el6_10.i686",
"6ComputeNode-optional-6.10.z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el6_10.src",
"6ComputeNode-optional-6.10.z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el6_10.i686",
"6ComputeNode-optional-6.10.z:java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el6_10.i686",
"6ComputeNode-optional-6.10.z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el6_10.i686",
"6ComputeNode-optional-6.10.z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el6_10.i686",
"6ComputeNode-optional-6.10.z:java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el6_10.i686",
"6ComputeNode-optional-6.10.z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el6_10.i686",
"6ComputeNode-optional-6.10.z:java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el6_10.i686",
"6ComputeNode-optional-6.10.z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el6_10.i686",
"6ComputeNode-optional-6.10.z:java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:java-1.8.0-openjdk-javadoc-1:1.8.0.181-3.b13.el6_10.noarch",
"6ComputeNode-optional-6.10.z:java-1.8.0-openjdk-javadoc-debug-1:1.8.0.181-3.b13.el6_10.noarch",
"6ComputeNode-optional-6.10.z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el6_10.i686",
"6ComputeNode-optional-6.10.z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el6_10.i686",
"6ComputeNode-optional-6.10.z:java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el6_10.x86_64",
"6Server-6.10.z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el6_10.i686",
"6Server-6.10.z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el6_10.src",
"6Server-6.10.z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el6_10.x86_64",
"6Server-6.10.z:java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el6_10.i686",
"6Server-6.10.z:java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el6_10.x86_64",
"6Server-6.10.z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el6_10.i686",
"6Server-6.10.z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el6_10.x86_64",
"6Server-6.10.z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el6_10.i686",
"6Server-6.10.z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el6_10.x86_64",
"6Server-6.10.z:java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el6_10.i686",
"6Server-6.10.z:java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el6_10.x86_64",
"6Server-6.10.z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el6_10.i686",
"6Server-6.10.z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el6_10.x86_64",
"6Server-6.10.z:java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el6_10.i686",
"6Server-6.10.z:java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el6_10.x86_64",
"6Server-6.10.z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el6_10.i686",
"6Server-6.10.z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el6_10.x86_64",
"6Server-6.10.z:java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el6_10.i686",
"6Server-6.10.z:java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el6_10.x86_64",
"6Server-6.10.z:java-1.8.0-openjdk-javadoc-1:1.8.0.181-3.b13.el6_10.noarch",
"6Server-6.10.z:java-1.8.0-openjdk-javadoc-debug-1:1.8.0.181-3.b13.el6_10.noarch",
"6Server-6.10.z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el6_10.i686",
"6Server-6.10.z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el6_10.x86_64",
"6Server-6.10.z:java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el6_10.i686",
"6Server-6.10.z:java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el6_10.x86_64",
"6Server-optional-6.10.z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el6_10.i686",
"6Server-optional-6.10.z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el6_10.src",
"6Server-optional-6.10.z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el6_10.x86_64",
"6Server-optional-6.10.z:java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el6_10.i686",
"6Server-optional-6.10.z:java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el6_10.x86_64",
"6Server-optional-6.10.z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el6_10.i686",
"6Server-optional-6.10.z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el6_10.x86_64",
"6Server-optional-6.10.z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el6_10.i686",
"6Server-optional-6.10.z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el6_10.x86_64",
"6Server-optional-6.10.z:java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el6_10.i686",
"6Server-optional-6.10.z:java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el6_10.x86_64",
"6Server-optional-6.10.z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el6_10.i686",
"6Server-optional-6.10.z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el6_10.x86_64",
"6Server-optional-6.10.z:java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el6_10.i686",
"6Server-optional-6.10.z:java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el6_10.x86_64",
"6Server-optional-6.10.z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el6_10.i686",
"6Server-optional-6.10.z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el6_10.x86_64",
"6Server-optional-6.10.z:java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el6_10.i686",
"6Server-optional-6.10.z:java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el6_10.x86_64",
"6Server-optional-6.10.z:java-1.8.0-openjdk-javadoc-1:1.8.0.181-3.b13.el6_10.noarch",
"6Server-optional-6.10.z:java-1.8.0-openjdk-javadoc-debug-1:1.8.0.181-3.b13.el6_10.noarch",
"6Server-optional-6.10.z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el6_10.i686",
"6Server-optional-6.10.z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el6_10.x86_64",
"6Server-optional-6.10.z:java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el6_10.i686",
"6Server-optional-6.10.z:java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el6_10.x86_64",
"6Workstation-6.10.z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el6_10.i686",
"6Workstation-6.10.z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el6_10.src",
"6Workstation-6.10.z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el6_10.x86_64",
"6Workstation-6.10.z:java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el6_10.i686",
"6Workstation-6.10.z:java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el6_10.x86_64",
"6Workstation-6.10.z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el6_10.i686",
"6Workstation-6.10.z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el6_10.x86_64",
"6Workstation-6.10.z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el6_10.i686",
"6Workstation-6.10.z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el6_10.x86_64",
"6Workstation-6.10.z:java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el6_10.i686",
"6Workstation-6.10.z:java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el6_10.x86_64",
"6Workstation-6.10.z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el6_10.i686",
"6Workstation-6.10.z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el6_10.x86_64",
"6Workstation-6.10.z:java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el6_10.i686",
"6Workstation-6.10.z:java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el6_10.x86_64",
"6Workstation-6.10.z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el6_10.i686",
"6Workstation-6.10.z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el6_10.x86_64",
"6Workstation-6.10.z:java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el6_10.i686",
"6Workstation-6.10.z:java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el6_10.x86_64",
"6Workstation-6.10.z:java-1.8.0-openjdk-javadoc-1:1.8.0.181-3.b13.el6_10.noarch",
"6Workstation-6.10.z:java-1.8.0-openjdk-javadoc-debug-1:1.8.0.181-3.b13.el6_10.noarch",
"6Workstation-6.10.z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el6_10.i686",
"6Workstation-6.10.z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el6_10.x86_64",
"6Workstation-6.10.z:java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el6_10.i686",
"6Workstation-6.10.z:java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el6_10.x86_64",
"6Workstation-optional-6.10.z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el6_10.i686",
"6Workstation-optional-6.10.z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el6_10.src",
"6Workstation-optional-6.10.z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el6_10.x86_64",
"6Workstation-optional-6.10.z:java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el6_10.i686",
"6Workstation-optional-6.10.z:java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el6_10.x86_64",
"6Workstation-optional-6.10.z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el6_10.i686",
"6Workstation-optional-6.10.z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el6_10.x86_64",
"6Workstation-optional-6.10.z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el6_10.i686",
"6Workstation-optional-6.10.z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el6_10.x86_64",
"6Workstation-optional-6.10.z:java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el6_10.i686",
"6Workstation-optional-6.10.z:java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el6_10.x86_64",
"6Workstation-optional-6.10.z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el6_10.i686",
"6Workstation-optional-6.10.z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el6_10.x86_64",
"6Workstation-optional-6.10.z:java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el6_10.i686",
"6Workstation-optional-6.10.z:java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el6_10.x86_64",
"6Workstation-optional-6.10.z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el6_10.i686",
"6Workstation-optional-6.10.z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el6_10.x86_64",
"6Workstation-optional-6.10.z:java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el6_10.i686",
"6Workstation-optional-6.10.z:java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el6_10.x86_64",
"6Workstation-optional-6.10.z:java-1.8.0-openjdk-javadoc-1:1.8.0.181-3.b13.el6_10.noarch",
"6Workstation-optional-6.10.z:java-1.8.0-openjdk-javadoc-debug-1:1.8.0.181-3.b13.el6_10.noarch",
"6Workstation-optional-6.10.z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el6_10.i686",
"6Workstation-optional-6.10.z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el6_10.x86_64",
"6Workstation-optional-6.10.z:java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el6_10.i686",
"6Workstation-optional-6.10.z:java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el6_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-2952"
},
{
"category": "external",
"summary": "RHBZ#1600925",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1600925"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-2952",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-2952"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2952",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2952"
}
],
"release_date": "2018-07-17T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-07-23T14:40:57+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of OpenJDK Java must be restarted for this update to take effect.",
"product_ids": [
"6Client-6.10.z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el6_10.i686",
"6Client-6.10.z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el6_10.src",
"6Client-6.10.z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el6_10.x86_64",
"6Client-6.10.z:java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el6_10.i686",
"6Client-6.10.z:java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el6_10.x86_64",
"6Client-6.10.z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el6_10.i686",
"6Client-6.10.z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el6_10.x86_64",
"6Client-6.10.z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el6_10.i686",
"6Client-6.10.z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el6_10.x86_64",
"6Client-6.10.z:java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el6_10.i686",
"6Client-6.10.z:java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el6_10.x86_64",
"6Client-6.10.z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el6_10.i686",
"6Client-6.10.z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el6_10.x86_64",
"6Client-6.10.z:java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el6_10.i686",
"6Client-6.10.z:java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el6_10.x86_64",
"6Client-6.10.z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el6_10.i686",
"6Client-6.10.z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el6_10.x86_64",
"6Client-6.10.z:java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el6_10.i686",
"6Client-6.10.z:java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el6_10.x86_64",
"6Client-6.10.z:java-1.8.0-openjdk-javadoc-1:1.8.0.181-3.b13.el6_10.noarch",
"6Client-6.10.z:java-1.8.0-openjdk-javadoc-debug-1:1.8.0.181-3.b13.el6_10.noarch",
"6Client-6.10.z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el6_10.i686",
"6Client-6.10.z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el6_10.x86_64",
"6Client-6.10.z:java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el6_10.i686",
"6Client-6.10.z:java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el6_10.x86_64",
"6Client-optional-6.10.z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el6_10.i686",
"6Client-optional-6.10.z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el6_10.src",
"6Client-optional-6.10.z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el6_10.x86_64",
"6Client-optional-6.10.z:java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el6_10.i686",
"6Client-optional-6.10.z:java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el6_10.x86_64",
"6Client-optional-6.10.z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el6_10.i686",
"6Client-optional-6.10.z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el6_10.x86_64",
"6Client-optional-6.10.z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el6_10.i686",
"6Client-optional-6.10.z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el6_10.x86_64",
"6Client-optional-6.10.z:java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el6_10.i686",
"6Client-optional-6.10.z:java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el6_10.x86_64",
"6Client-optional-6.10.z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el6_10.i686",
"6Client-optional-6.10.z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el6_10.x86_64",
"6Client-optional-6.10.z:java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el6_10.i686",
"6Client-optional-6.10.z:java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el6_10.x86_64",
"6Client-optional-6.10.z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el6_10.i686",
"6Client-optional-6.10.z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el6_10.x86_64",
"6Client-optional-6.10.z:java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el6_10.i686",
"6Client-optional-6.10.z:java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el6_10.x86_64",
"6Client-optional-6.10.z:java-1.8.0-openjdk-javadoc-1:1.8.0.181-3.b13.el6_10.noarch",
"6Client-optional-6.10.z:java-1.8.0-openjdk-javadoc-debug-1:1.8.0.181-3.b13.el6_10.noarch",
"6Client-optional-6.10.z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el6_10.i686",
"6Client-optional-6.10.z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el6_10.x86_64",
"6Client-optional-6.10.z:java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el6_10.i686",
"6Client-optional-6.10.z:java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el6_10.x86_64",
"6ComputeNode-6.10.z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el6_10.i686",
"6ComputeNode-6.10.z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el6_10.src",
"6ComputeNode-6.10.z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el6_10.x86_64",
"6ComputeNode-6.10.z:java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el6_10.i686",
"6ComputeNode-6.10.z:java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el6_10.x86_64",
"6ComputeNode-6.10.z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el6_10.i686",
"6ComputeNode-6.10.z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el6_10.x86_64",
"6ComputeNode-6.10.z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el6_10.i686",
"6ComputeNode-6.10.z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el6_10.x86_64",
"6ComputeNode-6.10.z:java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el6_10.i686",
"6ComputeNode-6.10.z:java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el6_10.x86_64",
"6ComputeNode-6.10.z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el6_10.i686",
"6ComputeNode-6.10.z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el6_10.x86_64",
"6ComputeNode-6.10.z:java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el6_10.i686",
"6ComputeNode-6.10.z:java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el6_10.x86_64",
"6ComputeNode-6.10.z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el6_10.i686",
"6ComputeNode-6.10.z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el6_10.x86_64",
"6ComputeNode-6.10.z:java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el6_10.i686",
"6ComputeNode-6.10.z:java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el6_10.x86_64",
"6ComputeNode-6.10.z:java-1.8.0-openjdk-javadoc-1:1.8.0.181-3.b13.el6_10.noarch",
"6ComputeNode-6.10.z:java-1.8.0-openjdk-javadoc-debug-1:1.8.0.181-3.b13.el6_10.noarch",
"6ComputeNode-6.10.z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el6_10.i686",
"6ComputeNode-6.10.z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el6_10.x86_64",
"6ComputeNode-6.10.z:java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el6_10.i686",
"6ComputeNode-6.10.z:java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el6_10.i686",
"6ComputeNode-optional-6.10.z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el6_10.src",
"6ComputeNode-optional-6.10.z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el6_10.i686",
"6ComputeNode-optional-6.10.z:java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el6_10.i686",
"6ComputeNode-optional-6.10.z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el6_10.i686",
"6ComputeNode-optional-6.10.z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el6_10.i686",
"6ComputeNode-optional-6.10.z:java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el6_10.i686",
"6ComputeNode-optional-6.10.z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el6_10.i686",
"6ComputeNode-optional-6.10.z:java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el6_10.i686",
"6ComputeNode-optional-6.10.z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el6_10.i686",
"6ComputeNode-optional-6.10.z:java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:java-1.8.0-openjdk-javadoc-1:1.8.0.181-3.b13.el6_10.noarch",
"6ComputeNode-optional-6.10.z:java-1.8.0-openjdk-javadoc-debug-1:1.8.0.181-3.b13.el6_10.noarch",
"6ComputeNode-optional-6.10.z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el6_10.i686",
"6ComputeNode-optional-6.10.z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el6_10.i686",
"6ComputeNode-optional-6.10.z:java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el6_10.x86_64",
"6Server-6.10.z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el6_10.i686",
"6Server-6.10.z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el6_10.src",
"6Server-6.10.z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el6_10.x86_64",
"6Server-6.10.z:java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el6_10.i686",
"6Server-6.10.z:java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el6_10.x86_64",
"6Server-6.10.z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el6_10.i686",
"6Server-6.10.z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el6_10.x86_64",
"6Server-6.10.z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el6_10.i686",
"6Server-6.10.z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el6_10.x86_64",
"6Server-6.10.z:java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el6_10.i686",
"6Server-6.10.z:java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el6_10.x86_64",
"6Server-6.10.z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el6_10.i686",
"6Server-6.10.z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el6_10.x86_64",
"6Server-6.10.z:java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el6_10.i686",
"6Server-6.10.z:java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el6_10.x86_64",
"6Server-6.10.z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el6_10.i686",
"6Server-6.10.z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el6_10.x86_64",
"6Server-6.10.z:java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el6_10.i686",
"6Server-6.10.z:java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el6_10.x86_64",
"6Server-6.10.z:java-1.8.0-openjdk-javadoc-1:1.8.0.181-3.b13.el6_10.noarch",
"6Server-6.10.z:java-1.8.0-openjdk-javadoc-debug-1:1.8.0.181-3.b13.el6_10.noarch",
"6Server-6.10.z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el6_10.i686",
"6Server-6.10.z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el6_10.x86_64",
"6Server-6.10.z:java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el6_10.i686",
"6Server-6.10.z:java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el6_10.x86_64",
"6Server-optional-6.10.z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el6_10.i686",
"6Server-optional-6.10.z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el6_10.src",
"6Server-optional-6.10.z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el6_10.x86_64",
"6Server-optional-6.10.z:java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el6_10.i686",
"6Server-optional-6.10.z:java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el6_10.x86_64",
"6Server-optional-6.10.z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el6_10.i686",
"6Server-optional-6.10.z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el6_10.x86_64",
"6Server-optional-6.10.z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el6_10.i686",
"6Server-optional-6.10.z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el6_10.x86_64",
"6Server-optional-6.10.z:java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el6_10.i686",
"6Server-optional-6.10.z:java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el6_10.x86_64",
"6Server-optional-6.10.z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el6_10.i686",
"6Server-optional-6.10.z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el6_10.x86_64",
"6Server-optional-6.10.z:java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el6_10.i686",
"6Server-optional-6.10.z:java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el6_10.x86_64",
"6Server-optional-6.10.z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el6_10.i686",
"6Server-optional-6.10.z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el6_10.x86_64",
"6Server-optional-6.10.z:java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el6_10.i686",
"6Server-optional-6.10.z:java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el6_10.x86_64",
"6Server-optional-6.10.z:java-1.8.0-openjdk-javadoc-1:1.8.0.181-3.b13.el6_10.noarch",
"6Server-optional-6.10.z:java-1.8.0-openjdk-javadoc-debug-1:1.8.0.181-3.b13.el6_10.noarch",
"6Server-optional-6.10.z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el6_10.i686",
"6Server-optional-6.10.z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el6_10.x86_64",
"6Server-optional-6.10.z:java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el6_10.i686",
"6Server-optional-6.10.z:java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el6_10.x86_64",
"6Workstation-6.10.z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el6_10.i686",
"6Workstation-6.10.z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el6_10.src",
"6Workstation-6.10.z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el6_10.x86_64",
"6Workstation-6.10.z:java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el6_10.i686",
"6Workstation-6.10.z:java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el6_10.x86_64",
"6Workstation-6.10.z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el6_10.i686",
"6Workstation-6.10.z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el6_10.x86_64",
"6Workstation-6.10.z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el6_10.i686",
"6Workstation-6.10.z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el6_10.x86_64",
"6Workstation-6.10.z:java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el6_10.i686",
"6Workstation-6.10.z:java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el6_10.x86_64",
"6Workstation-6.10.z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el6_10.i686",
"6Workstation-6.10.z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el6_10.x86_64",
"6Workstation-6.10.z:java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el6_10.i686",
"6Workstation-6.10.z:java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el6_10.x86_64",
"6Workstation-6.10.z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el6_10.i686",
"6Workstation-6.10.z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el6_10.x86_64",
"6Workstation-6.10.z:java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el6_10.i686",
"6Workstation-6.10.z:java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el6_10.x86_64",
"6Workstation-6.10.z:java-1.8.0-openjdk-javadoc-1:1.8.0.181-3.b13.el6_10.noarch",
"6Workstation-6.10.z:java-1.8.0-openjdk-javadoc-debug-1:1.8.0.181-3.b13.el6_10.noarch",
"6Workstation-6.10.z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el6_10.i686",
"6Workstation-6.10.z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el6_10.x86_64",
"6Workstation-6.10.z:java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el6_10.i686",
"6Workstation-6.10.z:java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el6_10.x86_64",
"6Workstation-optional-6.10.z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el6_10.i686",
"6Workstation-optional-6.10.z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el6_10.src",
"6Workstation-optional-6.10.z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el6_10.x86_64",
"6Workstation-optional-6.10.z:java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el6_10.i686",
"6Workstation-optional-6.10.z:java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el6_10.x86_64",
"6Workstation-optional-6.10.z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el6_10.i686",
"6Workstation-optional-6.10.z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el6_10.x86_64",
"6Workstation-optional-6.10.z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el6_10.i686",
"6Workstation-optional-6.10.z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el6_10.x86_64",
"6Workstation-optional-6.10.z:java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el6_10.i686",
"6Workstation-optional-6.10.z:java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el6_10.x86_64",
"6Workstation-optional-6.10.z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el6_10.i686",
"6Workstation-optional-6.10.z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el6_10.x86_64",
"6Workstation-optional-6.10.z:java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el6_10.i686",
"6Workstation-optional-6.10.z:java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el6_10.x86_64",
"6Workstation-optional-6.10.z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el6_10.i686",
"6Workstation-optional-6.10.z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el6_10.x86_64",
"6Workstation-optional-6.10.z:java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el6_10.i686",
"6Workstation-optional-6.10.z:java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el6_10.x86_64",
"6Workstation-optional-6.10.z:java-1.8.0-openjdk-javadoc-1:1.8.0.181-3.b13.el6_10.noarch",
"6Workstation-optional-6.10.z:java-1.8.0-openjdk-javadoc-debug-1:1.8.0.181-3.b13.el6_10.noarch",
"6Workstation-optional-6.10.z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el6_10.i686",
"6Workstation-optional-6.10.z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el6_10.x86_64",
"6Workstation-optional-6.10.z:java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el6_10.i686",
"6Workstation-optional-6.10.z:java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el6_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:2241"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 3.7,
"baseSeverity": "LOW",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"6Client-6.10.z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el6_10.i686",
"6Client-6.10.z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el6_10.src",
"6Client-6.10.z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el6_10.x86_64",
"6Client-6.10.z:java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el6_10.i686",
"6Client-6.10.z:java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el6_10.x86_64",
"6Client-6.10.z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el6_10.i686",
"6Client-6.10.z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el6_10.x86_64",
"6Client-6.10.z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el6_10.i686",
"6Client-6.10.z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el6_10.x86_64",
"6Client-6.10.z:java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el6_10.i686",
"6Client-6.10.z:java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el6_10.x86_64",
"6Client-6.10.z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el6_10.i686",
"6Client-6.10.z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el6_10.x86_64",
"6Client-6.10.z:java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el6_10.i686",
"6Client-6.10.z:java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el6_10.x86_64",
"6Client-6.10.z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el6_10.i686",
"6Client-6.10.z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el6_10.x86_64",
"6Client-6.10.z:java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el6_10.i686",
"6Client-6.10.z:java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el6_10.x86_64",
"6Client-6.10.z:java-1.8.0-openjdk-javadoc-1:1.8.0.181-3.b13.el6_10.noarch",
"6Client-6.10.z:java-1.8.0-openjdk-javadoc-debug-1:1.8.0.181-3.b13.el6_10.noarch",
"6Client-6.10.z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el6_10.i686",
"6Client-6.10.z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el6_10.x86_64",
"6Client-6.10.z:java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el6_10.i686",
"6Client-6.10.z:java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el6_10.x86_64",
"6Client-optional-6.10.z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el6_10.i686",
"6Client-optional-6.10.z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el6_10.src",
"6Client-optional-6.10.z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el6_10.x86_64",
"6Client-optional-6.10.z:java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el6_10.i686",
"6Client-optional-6.10.z:java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el6_10.x86_64",
"6Client-optional-6.10.z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el6_10.i686",
"6Client-optional-6.10.z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el6_10.x86_64",
"6Client-optional-6.10.z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el6_10.i686",
"6Client-optional-6.10.z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el6_10.x86_64",
"6Client-optional-6.10.z:java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el6_10.i686",
"6Client-optional-6.10.z:java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el6_10.x86_64",
"6Client-optional-6.10.z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el6_10.i686",
"6Client-optional-6.10.z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el6_10.x86_64",
"6Client-optional-6.10.z:java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el6_10.i686",
"6Client-optional-6.10.z:java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el6_10.x86_64",
"6Client-optional-6.10.z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el6_10.i686",
"6Client-optional-6.10.z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el6_10.x86_64",
"6Client-optional-6.10.z:java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el6_10.i686",
"6Client-optional-6.10.z:java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el6_10.x86_64",
"6Client-optional-6.10.z:java-1.8.0-openjdk-javadoc-1:1.8.0.181-3.b13.el6_10.noarch",
"6Client-optional-6.10.z:java-1.8.0-openjdk-javadoc-debug-1:1.8.0.181-3.b13.el6_10.noarch",
"6Client-optional-6.10.z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el6_10.i686",
"6Client-optional-6.10.z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el6_10.x86_64",
"6Client-optional-6.10.z:java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el6_10.i686",
"6Client-optional-6.10.z:java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el6_10.x86_64",
"6ComputeNode-6.10.z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el6_10.i686",
"6ComputeNode-6.10.z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el6_10.src",
"6ComputeNode-6.10.z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el6_10.x86_64",
"6ComputeNode-6.10.z:java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el6_10.i686",
"6ComputeNode-6.10.z:java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el6_10.x86_64",
"6ComputeNode-6.10.z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el6_10.i686",
"6ComputeNode-6.10.z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el6_10.x86_64",
"6ComputeNode-6.10.z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el6_10.i686",
"6ComputeNode-6.10.z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el6_10.x86_64",
"6ComputeNode-6.10.z:java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el6_10.i686",
"6ComputeNode-6.10.z:java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el6_10.x86_64",
"6ComputeNode-6.10.z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el6_10.i686",
"6ComputeNode-6.10.z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el6_10.x86_64",
"6ComputeNode-6.10.z:java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el6_10.i686",
"6ComputeNode-6.10.z:java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el6_10.x86_64",
"6ComputeNode-6.10.z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el6_10.i686",
"6ComputeNode-6.10.z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el6_10.x86_64",
"6ComputeNode-6.10.z:java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el6_10.i686",
"6ComputeNode-6.10.z:java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el6_10.x86_64",
"6ComputeNode-6.10.z:java-1.8.0-openjdk-javadoc-1:1.8.0.181-3.b13.el6_10.noarch",
"6ComputeNode-6.10.z:java-1.8.0-openjdk-javadoc-debug-1:1.8.0.181-3.b13.el6_10.noarch",
"6ComputeNode-6.10.z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el6_10.i686",
"6ComputeNode-6.10.z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el6_10.x86_64",
"6ComputeNode-6.10.z:java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el6_10.i686",
"6ComputeNode-6.10.z:java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el6_10.i686",
"6ComputeNode-optional-6.10.z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el6_10.src",
"6ComputeNode-optional-6.10.z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el6_10.i686",
"6ComputeNode-optional-6.10.z:java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el6_10.i686",
"6ComputeNode-optional-6.10.z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el6_10.i686",
"6ComputeNode-optional-6.10.z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el6_10.i686",
"6ComputeNode-optional-6.10.z:java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el6_10.i686",
"6ComputeNode-optional-6.10.z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el6_10.i686",
"6ComputeNode-optional-6.10.z:java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el6_10.i686",
"6ComputeNode-optional-6.10.z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el6_10.i686",
"6ComputeNode-optional-6.10.z:java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:java-1.8.0-openjdk-javadoc-1:1.8.0.181-3.b13.el6_10.noarch",
"6ComputeNode-optional-6.10.z:java-1.8.0-openjdk-javadoc-debug-1:1.8.0.181-3.b13.el6_10.noarch",
"6ComputeNode-optional-6.10.z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el6_10.i686",
"6ComputeNode-optional-6.10.z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el6_10.i686",
"6ComputeNode-optional-6.10.z:java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el6_10.x86_64",
"6Server-6.10.z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el6_10.i686",
"6Server-6.10.z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el6_10.src",
"6Server-6.10.z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el6_10.x86_64",
"6Server-6.10.z:java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el6_10.i686",
"6Server-6.10.z:java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el6_10.x86_64",
"6Server-6.10.z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el6_10.i686",
"6Server-6.10.z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el6_10.x86_64",
"6Server-6.10.z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el6_10.i686",
"6Server-6.10.z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el6_10.x86_64",
"6Server-6.10.z:java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el6_10.i686",
"6Server-6.10.z:java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el6_10.x86_64",
"6Server-6.10.z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el6_10.i686",
"6Server-6.10.z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el6_10.x86_64",
"6Server-6.10.z:java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el6_10.i686",
"6Server-6.10.z:java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el6_10.x86_64",
"6Server-6.10.z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el6_10.i686",
"6Server-6.10.z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el6_10.x86_64",
"6Server-6.10.z:java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el6_10.i686",
"6Server-6.10.z:java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el6_10.x86_64",
"6Server-6.10.z:java-1.8.0-openjdk-javadoc-1:1.8.0.181-3.b13.el6_10.noarch",
"6Server-6.10.z:java-1.8.0-openjdk-javadoc-debug-1:1.8.0.181-3.b13.el6_10.noarch",
"6Server-6.10.z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el6_10.i686",
"6Server-6.10.z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el6_10.x86_64",
"6Server-6.10.z:java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el6_10.i686",
"6Server-6.10.z:java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el6_10.x86_64",
"6Server-optional-6.10.z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el6_10.i686",
"6Server-optional-6.10.z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el6_10.src",
"6Server-optional-6.10.z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el6_10.x86_64",
"6Server-optional-6.10.z:java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el6_10.i686",
"6Server-optional-6.10.z:java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el6_10.x86_64",
"6Server-optional-6.10.z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el6_10.i686",
"6Server-optional-6.10.z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el6_10.x86_64",
"6Server-optional-6.10.z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el6_10.i686",
"6Server-optional-6.10.z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el6_10.x86_64",
"6Server-optional-6.10.z:java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el6_10.i686",
"6Server-optional-6.10.z:java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el6_10.x86_64",
"6Server-optional-6.10.z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el6_10.i686",
"6Server-optional-6.10.z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el6_10.x86_64",
"6Server-optional-6.10.z:java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el6_10.i686",
"6Server-optional-6.10.z:java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el6_10.x86_64",
"6Server-optional-6.10.z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el6_10.i686",
"6Server-optional-6.10.z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el6_10.x86_64",
"6Server-optional-6.10.z:java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el6_10.i686",
"6Server-optional-6.10.z:java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el6_10.x86_64",
"6Server-optional-6.10.z:java-1.8.0-openjdk-javadoc-1:1.8.0.181-3.b13.el6_10.noarch",
"6Server-optional-6.10.z:java-1.8.0-openjdk-javadoc-debug-1:1.8.0.181-3.b13.el6_10.noarch",
"6Server-optional-6.10.z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el6_10.i686",
"6Server-optional-6.10.z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el6_10.x86_64",
"6Server-optional-6.10.z:java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el6_10.i686",
"6Server-optional-6.10.z:java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el6_10.x86_64",
"6Workstation-6.10.z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el6_10.i686",
"6Workstation-6.10.z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el6_10.src",
"6Workstation-6.10.z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el6_10.x86_64",
"6Workstation-6.10.z:java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el6_10.i686",
"6Workstation-6.10.z:java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el6_10.x86_64",
"6Workstation-6.10.z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el6_10.i686",
"6Workstation-6.10.z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el6_10.x86_64",
"6Workstation-6.10.z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el6_10.i686",
"6Workstation-6.10.z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el6_10.x86_64",
"6Workstation-6.10.z:java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el6_10.i686",
"6Workstation-6.10.z:java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el6_10.x86_64",
"6Workstation-6.10.z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el6_10.i686",
"6Workstation-6.10.z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el6_10.x86_64",
"6Workstation-6.10.z:java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el6_10.i686",
"6Workstation-6.10.z:java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el6_10.x86_64",
"6Workstation-6.10.z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el6_10.i686",
"6Workstation-6.10.z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el6_10.x86_64",
"6Workstation-6.10.z:java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el6_10.i686",
"6Workstation-6.10.z:java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el6_10.x86_64",
"6Workstation-6.10.z:java-1.8.0-openjdk-javadoc-1:1.8.0.181-3.b13.el6_10.noarch",
"6Workstation-6.10.z:java-1.8.0-openjdk-javadoc-debug-1:1.8.0.181-3.b13.el6_10.noarch",
"6Workstation-6.10.z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el6_10.i686",
"6Workstation-6.10.z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el6_10.x86_64",
"6Workstation-6.10.z:java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el6_10.i686",
"6Workstation-6.10.z:java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el6_10.x86_64",
"6Workstation-optional-6.10.z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el6_10.i686",
"6Workstation-optional-6.10.z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el6_10.src",
"6Workstation-optional-6.10.z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el6_10.x86_64",
"6Workstation-optional-6.10.z:java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el6_10.i686",
"6Workstation-optional-6.10.z:java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el6_10.x86_64",
"6Workstation-optional-6.10.z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el6_10.i686",
"6Workstation-optional-6.10.z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el6_10.x86_64",
"6Workstation-optional-6.10.z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el6_10.i686",
"6Workstation-optional-6.10.z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el6_10.x86_64",
"6Workstation-optional-6.10.z:java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el6_10.i686",
"6Workstation-optional-6.10.z:java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el6_10.x86_64",
"6Workstation-optional-6.10.z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el6_10.i686",
"6Workstation-optional-6.10.z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el6_10.x86_64",
"6Workstation-optional-6.10.z:java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el6_10.i686",
"6Workstation-optional-6.10.z:java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el6_10.x86_64",
"6Workstation-optional-6.10.z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el6_10.i686",
"6Workstation-optional-6.10.z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el6_10.x86_64",
"6Workstation-optional-6.10.z:java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el6_10.i686",
"6Workstation-optional-6.10.z:java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el6_10.x86_64",
"6Workstation-optional-6.10.z:java-1.8.0-openjdk-javadoc-1:1.8.0.181-3.b13.el6_10.noarch",
"6Workstation-optional-6.10.z:java-1.8.0-openjdk-javadoc-debug-1:1.8.0.181-3.b13.el6_10.noarch",
"6Workstation-optional-6.10.z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el6_10.i686",
"6Workstation-optional-6.10.z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el6_10.x86_64",
"6Workstation-optional-6.10.z:java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el6_10.i686",
"6Workstation-optional-6.10.z:java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el6_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "OpenJDK: insufficient index validation in PatternSyntaxException getMessage() (Concurrency, 8199547)"
}
]
}
rhsa-2018:2576
Vulnerability from csaf_redhat
Published
2018-08-28 19:21
Modified
2025-08-03 22:20
Summary
Red Hat Security Advisory: java-1.7.1-ibm security update
Notes
Topic
An update for java-1.7.1-ibm is now available for Red Hat Enterprise Linux 6 Supplementary.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
IBM Java SE version 7 Release 1 includes the IBM Java Runtime Environment and the IBM Java Software Development Kit.
This update upgrades IBM Java SE 7 to version 7R1 SR4-FP30.
Security Fix(es):
* IBM JDK: privilege escalation via insufficiently restricted access to Attach API (CVE-2018-12539)
* IBM JDK: DoS in the java.math component (CVE-2018-1517)
* IBM JDK: path traversal flaw in the Diagnostic Tooling Framework (CVE-2018-1656)
* Oracle JDK: unspecified vulnerability fixed in 6u201, 7u191, 8u181, and 10.0.2 (Libraries) (CVE-2018-2940)
* OpenJDK: insufficient index validation in PatternSyntaxException getMessage() (Concurrency, 8199547) (CVE-2018-2952)
* Oracle JDK: unspecified vulnerability fixed in 6u201, 7u191, 8u181, and 10.0.2 (JSSE) (CVE-2018-2973)
For more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for java-1.7.1-ibm is now available for Red Hat Enterprise Linux 6 Supplementary.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "IBM Java SE version 7 Release 1 includes the IBM Java Runtime Environment and the IBM Java Software Development Kit.\n\nThis update upgrades IBM Java SE 7 to version 7R1 SR4-FP30.\n\nSecurity Fix(es):\n\n* IBM JDK: privilege escalation via insufficiently restricted access to Attach API (CVE-2018-12539)\n\n* IBM JDK: DoS in the java.math component (CVE-2018-1517)\n\n* IBM JDK: path traversal flaw in the Diagnostic Tooling Framework (CVE-2018-1656)\n\n* Oracle JDK: unspecified vulnerability fixed in 6u201, 7u191, 8u181, and 10.0.2 (Libraries) (CVE-2018-2940)\n\n* OpenJDK: insufficient index validation in PatternSyntaxException getMessage() (Concurrency, 8199547) (CVE-2018-2952)\n\n* Oracle JDK: unspecified vulnerability fixed in 6u201, 7u191, 8u181, and 10.0.2 (JSSE) (CVE-2018-2973)\n\nFor more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2018:2576",
"url": "https://access.redhat.com/errata/RHSA-2018:2576"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "1600925",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1600925"
},
{
"category": "external",
"summary": "1602145",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1602145"
},
{
"category": "external",
"summary": "1602146",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1602146"
},
{
"category": "external",
"summary": "1618767",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1618767"
},
{
"category": "external",
"summary": "1618869",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1618869"
},
{
"category": "external",
"summary": "1618871",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1618871"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_2576.json"
}
],
"title": "Red Hat Security Advisory: java-1.7.1-ibm security update",
"tracking": {
"current_release_date": "2025-08-03T22:20:01+00:00",
"generator": {
"date": "2025-08-03T22:20:01+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.6.6"
}
},
"id": "RHSA-2018:2576",
"initial_release_date": "2018-08-28T19:21:22+00:00",
"revision_history": [
{
"date": "2018-08-28T19:21:22+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2018-08-28T19:21:22+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2025-08-03T22:20:01+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
"product": {
"name": "Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
"product_id": "6Client-Supplementary-6.10.z",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras:6"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux HPC Node Supplementary (v. 6)",
"product": {
"name": "Red Hat Enterprise Linux HPC Node Supplementary (v. 6)",
"product_id": "6ComputeNode-Supplementary-6.10.z",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras:6"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Server Supplementary (v. 6)",
"product": {
"name": "Red Hat Enterprise Linux Server Supplementary (v. 6)",
"product_id": "6Server-Supplementary-6.10.z",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras:6"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
"product": {
"name": "Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
"product_id": "6Workstation-Supplementary-6.10.z",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras:6"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux Supplementary"
},
{
"branches": [
{
"category": "product_version",
"name": "java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"product": {
"name": "java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"product_id": "java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.7.1-ibm-jdbc@1.7.1.4.30-1jpp.2.el6_10?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"product": {
"name": "java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"product_id": "java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.7.1-ibm-devel@1.7.1.4.30-1jpp.2.el6_10?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"product": {
"name": "java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"product_id": "java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.7.1-ibm-demo@1.7.1.4.30-1jpp.2.el6_10?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.7.1-ibm-plugin-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"product": {
"name": "java-1.7.1-ibm-plugin-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"product_id": "java-1.7.1-ibm-plugin-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.7.1-ibm-plugin@1.7.1.4.30-1jpp.2.el6_10?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"product": {
"name": "java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"product_id": "java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.7.1-ibm@1.7.1.4.30-1jpp.2.el6_10?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"product": {
"name": "java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"product_id": "java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.7.1-ibm-src@1.7.1.4.30-1jpp.2.el6_10?arch=x86_64\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"product": {
"name": "java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"product_id": "java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.7.1-ibm-jdbc@1.7.1.4.30-1jpp.2.el6_10?arch=i686\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"product": {
"name": "java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"product_id": "java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.7.1-ibm-devel@1.7.1.4.30-1jpp.2.el6_10?arch=i686\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"product": {
"name": "java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"product_id": "java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.7.1-ibm-demo@1.7.1.4.30-1jpp.2.el6_10?arch=i686\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.7.1-ibm-plugin-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"product": {
"name": "java-1.7.1-ibm-plugin-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"product_id": "java-1.7.1-ibm-plugin-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.7.1-ibm-plugin@1.7.1.4.30-1jpp.2.el6_10?arch=i686\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"product": {
"name": "java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"product_id": "java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.7.1-ibm@1.7.1.4.30-1jpp.2.el6_10?arch=i686\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"product": {
"name": "java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"product_id": "java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.7.1-ibm-src@1.7.1.4.30-1jpp.2.el6_10?arch=i686\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "i686"
},
{
"branches": [
{
"category": "product_version",
"name": "java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"product": {
"name": "java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"product_id": "java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.7.1-ibm-jdbc@1.7.1.4.30-1jpp.2.el6_10?arch=s390x\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"product": {
"name": "java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"product_id": "java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.7.1-ibm-devel@1.7.1.4.30-1jpp.2.el6_10?arch=s390x\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"product": {
"name": "java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"product_id": "java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.7.1-ibm-demo@1.7.1.4.30-1jpp.2.el6_10?arch=s390x\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"product": {
"name": "java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"product_id": "java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.7.1-ibm@1.7.1.4.30-1jpp.2.el6_10?arch=s390x\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"product": {
"name": "java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"product_id": "java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.7.1-ibm-src@1.7.1.4.30-1jpp.2.el6_10?arch=s390x\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"product": {
"name": "java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"product_id": "java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.7.1-ibm-jdbc@1.7.1.4.30-1jpp.2.el6_10?arch=ppc64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"product": {
"name": "java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"product_id": "java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.7.1-ibm-devel@1.7.1.4.30-1jpp.2.el6_10?arch=ppc64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"product": {
"name": "java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"product_id": "java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.7.1-ibm-demo@1.7.1.4.30-1jpp.2.el6_10?arch=ppc64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"product": {
"name": "java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"product_id": "java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.7.1-ibm@1.7.1.4.30-1jpp.2.el6_10?arch=ppc64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"product": {
"name": "java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"product_id": "java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.7.1-ibm-src@1.7.1.4.30-1jpp.2.el6_10?arch=ppc64\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "ppc64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
"product_id": "6Client-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.i686"
},
"product_reference": "java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"relates_to_product_reference": "6Client-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.ppc64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
"product_id": "6Client-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.ppc64"
},
"product_reference": "java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"relates_to_product_reference": "6Client-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.s390x as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
"product_id": "6Client-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.s390x"
},
"product_reference": "java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"relates_to_product_reference": "6Client-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
"product_id": "6Client-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.x86_64"
},
"product_reference": "java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"relates_to_product_reference": "6Client-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
"product_id": "6Client-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.i686"
},
"product_reference": "java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"relates_to_product_reference": "6Client-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.ppc64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
"product_id": "6Client-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.ppc64"
},
"product_reference": "java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"relates_to_product_reference": "6Client-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.s390x as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
"product_id": "6Client-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.s390x"
},
"product_reference": "java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"relates_to_product_reference": "6Client-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
"product_id": "6Client-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.x86_64"
},
"product_reference": "java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"relates_to_product_reference": "6Client-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
"product_id": "6Client-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.i686"
},
"product_reference": "java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"relates_to_product_reference": "6Client-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.ppc64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
"product_id": "6Client-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.ppc64"
},
"product_reference": "java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"relates_to_product_reference": "6Client-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.s390x as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
"product_id": "6Client-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.s390x"
},
"product_reference": "java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"relates_to_product_reference": "6Client-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
"product_id": "6Client-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.x86_64"
},
"product_reference": "java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"relates_to_product_reference": "6Client-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
"product_id": "6Client-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.i686"
},
"product_reference": "java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"relates_to_product_reference": "6Client-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.ppc64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
"product_id": "6Client-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.ppc64"
},
"product_reference": "java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"relates_to_product_reference": "6Client-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.s390x as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
"product_id": "6Client-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.s390x"
},
"product_reference": "java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"relates_to_product_reference": "6Client-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
"product_id": "6Client-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.x86_64"
},
"product_reference": "java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"relates_to_product_reference": "6Client-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-plugin-1:1.7.1.4.30-1jpp.2.el6_10.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
"product_id": "6Client-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.30-1jpp.2.el6_10.i686"
},
"product_reference": "java-1.7.1-ibm-plugin-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"relates_to_product_reference": "6Client-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-plugin-1:1.7.1.4.30-1jpp.2.el6_10.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
"product_id": "6Client-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.30-1jpp.2.el6_10.x86_64"
},
"product_reference": "java-1.7.1-ibm-plugin-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"relates_to_product_reference": "6Client-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
"product_id": "6Client-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.i686"
},
"product_reference": "java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"relates_to_product_reference": "6Client-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.ppc64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
"product_id": "6Client-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.ppc64"
},
"product_reference": "java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"relates_to_product_reference": "6Client-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.s390x as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
"product_id": "6Client-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.s390x"
},
"product_reference": "java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"relates_to_product_reference": "6Client-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
"product_id": "6Client-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.x86_64"
},
"product_reference": "java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"relates_to_product_reference": "6Client-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.i686 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)",
"product_id": "6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.i686"
},
"product_reference": "java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"relates_to_product_reference": "6ComputeNode-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.ppc64 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)",
"product_id": "6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.ppc64"
},
"product_reference": "java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"relates_to_product_reference": "6ComputeNode-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.s390x as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)",
"product_id": "6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.s390x"
},
"product_reference": "java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"relates_to_product_reference": "6ComputeNode-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.x86_64 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)",
"product_id": "6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.x86_64"
},
"product_reference": "java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"relates_to_product_reference": "6ComputeNode-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.i686 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)",
"product_id": "6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.i686"
},
"product_reference": "java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"relates_to_product_reference": "6ComputeNode-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.ppc64 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)",
"product_id": "6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.ppc64"
},
"product_reference": "java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"relates_to_product_reference": "6ComputeNode-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.s390x as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)",
"product_id": "6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.s390x"
},
"product_reference": "java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"relates_to_product_reference": "6ComputeNode-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.x86_64 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)",
"product_id": "6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.x86_64"
},
"product_reference": "java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"relates_to_product_reference": "6ComputeNode-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.i686 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)",
"product_id": "6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.i686"
},
"product_reference": "java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"relates_to_product_reference": "6ComputeNode-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.ppc64 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)",
"product_id": "6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.ppc64"
},
"product_reference": "java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"relates_to_product_reference": "6ComputeNode-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.s390x as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)",
"product_id": "6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.s390x"
},
"product_reference": "java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"relates_to_product_reference": "6ComputeNode-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.x86_64 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)",
"product_id": "6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.x86_64"
},
"product_reference": "java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"relates_to_product_reference": "6ComputeNode-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.i686 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)",
"product_id": "6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.i686"
},
"product_reference": "java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"relates_to_product_reference": "6ComputeNode-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.ppc64 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)",
"product_id": "6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.ppc64"
},
"product_reference": "java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"relates_to_product_reference": "6ComputeNode-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.s390x as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)",
"product_id": "6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.s390x"
},
"product_reference": "java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"relates_to_product_reference": "6ComputeNode-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.x86_64 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)",
"product_id": "6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.x86_64"
},
"product_reference": "java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"relates_to_product_reference": "6ComputeNode-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-plugin-1:1.7.1.4.30-1jpp.2.el6_10.i686 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)",
"product_id": "6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.30-1jpp.2.el6_10.i686"
},
"product_reference": "java-1.7.1-ibm-plugin-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"relates_to_product_reference": "6ComputeNode-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-plugin-1:1.7.1.4.30-1jpp.2.el6_10.x86_64 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)",
"product_id": "6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.30-1jpp.2.el6_10.x86_64"
},
"product_reference": "java-1.7.1-ibm-plugin-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"relates_to_product_reference": "6ComputeNode-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.i686 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)",
"product_id": "6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.i686"
},
"product_reference": "java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"relates_to_product_reference": "6ComputeNode-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.ppc64 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)",
"product_id": "6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.ppc64"
},
"product_reference": "java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"relates_to_product_reference": "6ComputeNode-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.s390x as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)",
"product_id": "6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.s390x"
},
"product_reference": "java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"relates_to_product_reference": "6ComputeNode-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.x86_64 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)",
"product_id": "6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.x86_64"
},
"product_reference": "java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"relates_to_product_reference": "6ComputeNode-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)",
"product_id": "6Server-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.i686"
},
"product_reference": "java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"relates_to_product_reference": "6Server-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.ppc64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)",
"product_id": "6Server-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.ppc64"
},
"product_reference": "java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"relates_to_product_reference": "6Server-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.s390x as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)",
"product_id": "6Server-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.s390x"
},
"product_reference": "java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"relates_to_product_reference": "6Server-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)",
"product_id": "6Server-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.x86_64"
},
"product_reference": "java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"relates_to_product_reference": "6Server-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)",
"product_id": "6Server-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.i686"
},
"product_reference": "java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"relates_to_product_reference": "6Server-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.ppc64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)",
"product_id": "6Server-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.ppc64"
},
"product_reference": "java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"relates_to_product_reference": "6Server-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.s390x as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)",
"product_id": "6Server-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.s390x"
},
"product_reference": "java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"relates_to_product_reference": "6Server-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)",
"product_id": "6Server-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.x86_64"
},
"product_reference": "java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"relates_to_product_reference": "6Server-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)",
"product_id": "6Server-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.i686"
},
"product_reference": "java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"relates_to_product_reference": "6Server-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.ppc64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)",
"product_id": "6Server-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.ppc64"
},
"product_reference": "java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"relates_to_product_reference": "6Server-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.s390x as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)",
"product_id": "6Server-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.s390x"
},
"product_reference": "java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"relates_to_product_reference": "6Server-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)",
"product_id": "6Server-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.x86_64"
},
"product_reference": "java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"relates_to_product_reference": "6Server-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)",
"product_id": "6Server-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.i686"
},
"product_reference": "java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"relates_to_product_reference": "6Server-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.ppc64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)",
"product_id": "6Server-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.ppc64"
},
"product_reference": "java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"relates_to_product_reference": "6Server-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.s390x as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)",
"product_id": "6Server-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.s390x"
},
"product_reference": "java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"relates_to_product_reference": "6Server-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)",
"product_id": "6Server-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.x86_64"
},
"product_reference": "java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"relates_to_product_reference": "6Server-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-plugin-1:1.7.1.4.30-1jpp.2.el6_10.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)",
"product_id": "6Server-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.30-1jpp.2.el6_10.i686"
},
"product_reference": "java-1.7.1-ibm-plugin-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"relates_to_product_reference": "6Server-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-plugin-1:1.7.1.4.30-1jpp.2.el6_10.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)",
"product_id": "6Server-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.30-1jpp.2.el6_10.x86_64"
},
"product_reference": "java-1.7.1-ibm-plugin-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"relates_to_product_reference": "6Server-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)",
"product_id": "6Server-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.i686"
},
"product_reference": "java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"relates_to_product_reference": "6Server-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.ppc64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)",
"product_id": "6Server-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.ppc64"
},
"product_reference": "java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"relates_to_product_reference": "6Server-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.s390x as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)",
"product_id": "6Server-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.s390x"
},
"product_reference": "java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"relates_to_product_reference": "6Server-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)",
"product_id": "6Server-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.x86_64"
},
"product_reference": "java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"relates_to_product_reference": "6Server-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
"product_id": "6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.i686"
},
"product_reference": "java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"relates_to_product_reference": "6Workstation-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.ppc64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
"product_id": "6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.ppc64"
},
"product_reference": "java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"relates_to_product_reference": "6Workstation-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.s390x as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
"product_id": "6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.s390x"
},
"product_reference": "java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"relates_to_product_reference": "6Workstation-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
"product_id": "6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.x86_64"
},
"product_reference": "java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"relates_to_product_reference": "6Workstation-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
"product_id": "6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.i686"
},
"product_reference": "java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"relates_to_product_reference": "6Workstation-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.ppc64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
"product_id": "6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.ppc64"
},
"product_reference": "java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"relates_to_product_reference": "6Workstation-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.s390x as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
"product_id": "6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.s390x"
},
"product_reference": "java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"relates_to_product_reference": "6Workstation-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
"product_id": "6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.x86_64"
},
"product_reference": "java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"relates_to_product_reference": "6Workstation-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
"product_id": "6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.i686"
},
"product_reference": "java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"relates_to_product_reference": "6Workstation-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.ppc64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
"product_id": "6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.ppc64"
},
"product_reference": "java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"relates_to_product_reference": "6Workstation-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.s390x as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
"product_id": "6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.s390x"
},
"product_reference": "java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"relates_to_product_reference": "6Workstation-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
"product_id": "6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.x86_64"
},
"product_reference": "java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"relates_to_product_reference": "6Workstation-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
"product_id": "6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.i686"
},
"product_reference": "java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"relates_to_product_reference": "6Workstation-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.ppc64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
"product_id": "6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.ppc64"
},
"product_reference": "java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"relates_to_product_reference": "6Workstation-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.s390x as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
"product_id": "6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.s390x"
},
"product_reference": "java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"relates_to_product_reference": "6Workstation-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
"product_id": "6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.x86_64"
},
"product_reference": "java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"relates_to_product_reference": "6Workstation-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-plugin-1:1.7.1.4.30-1jpp.2.el6_10.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
"product_id": "6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.30-1jpp.2.el6_10.i686"
},
"product_reference": "java-1.7.1-ibm-plugin-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"relates_to_product_reference": "6Workstation-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-plugin-1:1.7.1.4.30-1jpp.2.el6_10.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
"product_id": "6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.30-1jpp.2.el6_10.x86_64"
},
"product_reference": "java-1.7.1-ibm-plugin-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"relates_to_product_reference": "6Workstation-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
"product_id": "6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.i686"
},
"product_reference": "java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"relates_to_product_reference": "6Workstation-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.ppc64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
"product_id": "6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.ppc64"
},
"product_reference": "java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"relates_to_product_reference": "6Workstation-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.s390x as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
"product_id": "6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.s390x"
},
"product_reference": "java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"relates_to_product_reference": "6Workstation-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
"product_id": "6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.x86_64"
},
"product_reference": "java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"relates_to_product_reference": "6Workstation-Supplementary-6.10.z"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2018-1517",
"discovery_date": "2018-08-16T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1618871"
}
],
"notes": [
{
"category": "description",
"text": "A flaw in the java.math component in IBM SDK, Java Technology Edition 6.0, 7.0, and 8.0 may allow an attacker to inflict a denial-of-service attack with specially crafted String data. IBM X-Force ID: 141681.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "JDK: DoS in the java.math component",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-1517"
},
{
"category": "external",
"summary": "RHBZ#1618871",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1618871"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-1517",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-1517"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-1517",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-1517"
}
],
"release_date": "2018-08-16T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-08-28T19:21:22+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of IBM Java must be restarted for this update to take effect.",
"product_ids": [
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:2576"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "JDK: DoS in the java.math component"
},
{
"cve": "CVE-2018-1656",
"cwe": {
"id": "CWE-22",
"name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)"
},
"discovery_date": "2018-08-16T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1618869"
}
],
"notes": [
{
"category": "description",
"text": "The IBM Java Runtime Environment\u0027s Diagnostic Tooling Framework for Java (DTFJ) (IBM SDK, Java Technology Edition 6.0 , 7.0, and 8.0) does not protect against path traversal attacks when extracting compressed dump files. IBM X-Force ID: 144882.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "JDK: path traversal flaw in the Diagnostic Tooling Framework",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-1656"
},
{
"category": "external",
"summary": "RHBZ#1618869",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1618869"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-1656",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-1656"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-1656",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-1656"
}
],
"release_date": "2018-08-16T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-08-28T19:21:22+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of IBM Java must be restarted for this update to take effect.",
"product_ids": [
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:2576"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.0"
},
"products": [
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "JDK: path traversal flaw in the Diagnostic Tooling Framework"
},
{
"cve": "CVE-2018-2940",
"discovery_date": "2018-07-17T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1602146"
}
],
"notes": [
{
"category": "description",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries). Supported versions that are affected are Java SE: 6u191, 7u181, 8u172 and 10.0.1; Java SE Embedded: 8u171. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 4.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "JDK: unspecified vulnerability fixed in 6u201, 7u191, 8u181, and 10.0.2 (Libraries)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-2940"
},
{
"category": "external",
"summary": "RHBZ#1602146",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1602146"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-2940",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-2940"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2940",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2940"
},
{
"category": "external",
"summary": "http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html#AppendixJAVA",
"url": "http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html#AppendixJAVA"
}
],
"release_date": "2018-07-17T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-08-28T19:21:22+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of IBM Java must be restarted for this update to take effect.",
"product_ids": [
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:2576"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "JDK: unspecified vulnerability fixed in 6u201, 7u191, 8u181, and 10.0.2 (Libraries)"
},
{
"cve": "CVE-2018-2952",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2018-07-11T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1600925"
}
],
"notes": [
{
"category": "description",
"text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Concurrency). Supported versions that are affected are Java SE: 6u191, 7u181, 8u172 and 10.0.1; Java SE Embedded: 8u171; JRockit: R28.3.18. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 3.7 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK: insufficient index validation in PatternSyntaxException getMessage() (Concurrency, 8199547)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-2952"
},
{
"category": "external",
"summary": "RHBZ#1600925",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1600925"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-2952",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-2952"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2952",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2952"
}
],
"release_date": "2018-07-17T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-08-28T19:21:22+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of IBM Java must be restarted for this update to take effect.",
"product_ids": [
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:2576"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 3.7,
"baseSeverity": "LOW",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "OpenJDK: insufficient index validation in PatternSyntaxException getMessage() (Concurrency, 8199547)"
},
{
"cve": "CVE-2018-2973",
"discovery_date": "2018-07-17T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1602145"
}
],
"notes": [
{
"category": "description",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: JSSE). Supported versions that are affected are Java SE: 6u191, 7u181, 8u172 and 10.0.1; Java SE Embedded: 8u171. Difficult to exploit vulnerability allows unauthenticated attacker with network access via SSL/TLS to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 5.9 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "JDK: unspecified vulnerability fixed in 6u201, 7u191, 8u181, and 10.0.2 (JSSE)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-2973"
},
{
"category": "external",
"summary": "RHBZ#1602145",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1602145"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-2973",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-2973"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2973",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2973"
},
{
"category": "external",
"summary": "http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html#AppendixJAVA",
"url": "http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html#AppendixJAVA"
}
],
"release_date": "2018-07-17T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-08-28T19:21:22+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of IBM Java must be restarted for this update to take effect.",
"product_ids": [
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:2576"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.0"
},
"products": [
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "JDK: unspecified vulnerability fixed in 6u201, 7u191, 8u181, and 10.0.2 (JSSE)"
},
{
"cve": "CVE-2018-12539",
"cwe": {
"id": "CWE-287",
"name": "Improper Authentication"
},
"discovery_date": "2018-08-16T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1618767"
}
],
"notes": [
{
"category": "description",
"text": "In Eclipse OpenJ9 version 0.8, users other than the process owner may be able to use Java Attach API to connect to an Eclipse OpenJ9 or IBM JVM on the same machine and use Attach API operations, which includes the ability to execute untrusted native code. Attach API is enabled by default on Windows, Linux and AIX JVMs and can be disabled using the command line option -Dcom.ibm.tools.attach.enable=no.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "JDK: privilege escalation via insufficiently restricted access to Attach API",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-12539"
},
{
"category": "external",
"summary": "RHBZ#1618767",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1618767"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-12539",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-12539"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-12539",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-12539"
}
],
"release_date": "2018-05-11T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-08-28T19:21:22+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of IBM Java must be restarted for this update to take effect.",
"product_ids": [
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:2576"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 8.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.30-1jpp.2.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.30-1jpp.2.el6_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "JDK: privilege escalation via insufficiently restricted access to Attach API"
}
]
}
rhsa-2018:2253
Vulnerability from csaf_redhat
Published
2018-07-24 21:13
Modified
2025-08-03 18:29
Summary
Red Hat Security Advisory: java-1.8.0-oracle security update
Notes
Topic
An update for java-1.8.0-oracle is now available for Oracle Java for Red Hat Enterprise Linux 7.
Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
Oracle Java SE version 8 includes the Oracle Java Runtime Environment and the Oracle Java Software Development Kit.
This update upgrades Oracle Java SE 8 to version 8 Update 181.
Security Fix(es):
* Oracle JDK: unspecified vulnerability fixed in 7u191, 8u181, and 10.0.2 (JavaFX) (CVE-2018-2941)
* Oracle JDK: unspecified vulnerability fixed in 8u181 and 10.0.2 (Deployment) (CVE-2018-2964)
* Oracle JDK: unspecified vulnerability fixed in 6u201, 7u191, 8u181, and 10.0.2 (Libraries) (CVE-2018-2940)
* OpenJDK: insufficient index validation in PatternSyntaxException getMessage() (Concurrency, 8199547) (CVE-2018-2952)
* Oracle JDK: unspecified vulnerability fixed in 6u201, 7u191, 8u181, and 10.0.2 (JSSE) (CVE-2018-2973)
For more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Critical"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for java-1.8.0-oracle is now available for Oracle Java for Red Hat Enterprise Linux 7.\n\nRed Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Oracle Java SE version 8 includes the Oracle Java Runtime Environment and the Oracle Java Software Development Kit.\n\nThis update upgrades Oracle Java SE 8 to version 8 Update 181.\n\nSecurity Fix(es):\n\n* Oracle JDK: unspecified vulnerability fixed in 7u191, 8u181, and 10.0.2 (JavaFX) (CVE-2018-2941)\n\n* Oracle JDK: unspecified vulnerability fixed in 8u181 and 10.0.2 (Deployment) (CVE-2018-2964)\n\n* Oracle JDK: unspecified vulnerability fixed in 6u201, 7u191, 8u181, and 10.0.2 (Libraries) (CVE-2018-2940)\n\n* OpenJDK: insufficient index validation in PatternSyntaxException getMessage() (Concurrency, 8199547) (CVE-2018-2952)\n\n* Oracle JDK: unspecified vulnerability fixed in 6u201, 7u191, 8u181, and 10.0.2 (JSSE) (CVE-2018-2973)\n\nFor more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2018:2253",
"url": "https://access.redhat.com/errata/RHSA-2018:2253"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#critical",
"url": "https://access.redhat.com/security/updates/classification/#critical"
},
{
"category": "external",
"summary": "1600925",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1600925"
},
{
"category": "external",
"summary": "1602142",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1602142"
},
{
"category": "external",
"summary": "1602143",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1602143"
},
{
"category": "external",
"summary": "1602145",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1602145"
},
{
"category": "external",
"summary": "1602146",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1602146"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_2253.json"
}
],
"title": "Red Hat Security Advisory: java-1.8.0-oracle security update",
"tracking": {
"current_release_date": "2025-08-03T18:29:08+00:00",
"generator": {
"date": "2025-08-03T18:29:08+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.6.6"
}
},
"id": "RHSA-2018:2253",
"initial_release_date": "2018-07-24T21:13:37+00:00",
"revision_history": [
{
"date": "2018-07-24T21:13:37+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2018-07-24T21:13:37+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2025-08-03T18:29:08+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Oracle Java for Red Hat Enterprise Linux Client (v. 7)",
"product": {
"name": "Oracle Java for Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-OracleJava-7.5.Z",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras_oracle_java:7"
}
}
},
{
"category": "product_name",
"name": "Oracle Java for Red Hat Enterprise Linux Compute Node (v. 7)",
"product": {
"name": "Oracle Java for Red Hat Enterprise Linux Compute Node (v. 7)",
"product_id": "7ComputeNode-OracleJava-7.5.Z",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras_oracle_java:7"
}
}
},
{
"category": "product_name",
"name": "Oracle Java for Red Hat Enterprise Linux Server (v. 7)",
"product": {
"name": "Oracle Java for Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-OracleJava-7.5.Z",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras_oracle_java:7"
}
}
},
{
"category": "product_name",
"name": "Oracle Java for Red Hat Enterprise Linux Workstation (v. 7)",
"product": {
"name": "Oracle Java for Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-OracleJava-7.5.Z",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras_oracle_java:7"
}
}
}
],
"category": "product_family",
"name": "Oracle Java for Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "java-1.8.0-oracle-jdbc-1:1.8.0.181-1jpp.2.el7.x86_64",
"product": {
"name": "java-1.8.0-oracle-jdbc-1:1.8.0.181-1jpp.2.el7.x86_64",
"product_id": "java-1.8.0-oracle-jdbc-1:1.8.0.181-1jpp.2.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-oracle-jdbc@1.8.0.181-1jpp.2.el7?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-oracle-src-1:1.8.0.181-1jpp.2.el7.x86_64",
"product": {
"name": "java-1.8.0-oracle-src-1:1.8.0.181-1jpp.2.el7.x86_64",
"product_id": "java-1.8.0-oracle-src-1:1.8.0.181-1jpp.2.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-oracle-src@1.8.0.181-1jpp.2.el7?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-oracle-plugin-1:1.8.0.181-1jpp.2.el7.x86_64",
"product": {
"name": "java-1.8.0-oracle-plugin-1:1.8.0.181-1jpp.2.el7.x86_64",
"product_id": "java-1.8.0-oracle-plugin-1:1.8.0.181-1jpp.2.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-oracle-plugin@1.8.0.181-1jpp.2.el7?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-oracle-javafx-1:1.8.0.181-1jpp.2.el7.x86_64",
"product": {
"name": "java-1.8.0-oracle-javafx-1:1.8.0.181-1jpp.2.el7.x86_64",
"product_id": "java-1.8.0-oracle-javafx-1:1.8.0.181-1jpp.2.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-oracle-javafx@1.8.0.181-1jpp.2.el7?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-oracle-devel-1:1.8.0.181-1jpp.2.el7.x86_64",
"product": {
"name": "java-1.8.0-oracle-devel-1:1.8.0.181-1jpp.2.el7.x86_64",
"product_id": "java-1.8.0-oracle-devel-1:1.8.0.181-1jpp.2.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-oracle-devel@1.8.0.181-1jpp.2.el7?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el7.x86_64",
"product": {
"name": "java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el7.x86_64",
"product_id": "java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-oracle@1.8.0.181-1jpp.2.el7?arch=x86_64\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "x86_64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-OracleJava-7.5.Z:java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el7.x86_64"
},
"product_reference": "java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el7.x86_64",
"relates_to_product_reference": "7Client-OracleJava-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-oracle-devel-1:1.8.0.181-1jpp.2.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-OracleJava-7.5.Z:java-1.8.0-oracle-devel-1:1.8.0.181-1jpp.2.el7.x86_64"
},
"product_reference": "java-1.8.0-oracle-devel-1:1.8.0.181-1jpp.2.el7.x86_64",
"relates_to_product_reference": "7Client-OracleJava-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-oracle-javafx-1:1.8.0.181-1jpp.2.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-OracleJava-7.5.Z:java-1.8.0-oracle-javafx-1:1.8.0.181-1jpp.2.el7.x86_64"
},
"product_reference": "java-1.8.0-oracle-javafx-1:1.8.0.181-1jpp.2.el7.x86_64",
"relates_to_product_reference": "7Client-OracleJava-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-oracle-jdbc-1:1.8.0.181-1jpp.2.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-OracleJava-7.5.Z:java-1.8.0-oracle-jdbc-1:1.8.0.181-1jpp.2.el7.x86_64"
},
"product_reference": "java-1.8.0-oracle-jdbc-1:1.8.0.181-1jpp.2.el7.x86_64",
"relates_to_product_reference": "7Client-OracleJava-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-oracle-plugin-1:1.8.0.181-1jpp.2.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-OracleJava-7.5.Z:java-1.8.0-oracle-plugin-1:1.8.0.181-1jpp.2.el7.x86_64"
},
"product_reference": "java-1.8.0-oracle-plugin-1:1.8.0.181-1jpp.2.el7.x86_64",
"relates_to_product_reference": "7Client-OracleJava-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-oracle-src-1:1.8.0.181-1jpp.2.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-OracleJava-7.5.Z:java-1.8.0-oracle-src-1:1.8.0.181-1jpp.2.el7.x86_64"
},
"product_reference": "java-1.8.0-oracle-src-1:1.8.0.181-1jpp.2.el7.x86_64",
"relates_to_product_reference": "7Client-OracleJava-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Compute Node (v. 7)",
"product_id": "7ComputeNode-OracleJava-7.5.Z:java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el7.x86_64"
},
"product_reference": "java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el7.x86_64",
"relates_to_product_reference": "7ComputeNode-OracleJava-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-oracle-devel-1:1.8.0.181-1jpp.2.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Compute Node (v. 7)",
"product_id": "7ComputeNode-OracleJava-7.5.Z:java-1.8.0-oracle-devel-1:1.8.0.181-1jpp.2.el7.x86_64"
},
"product_reference": "java-1.8.0-oracle-devel-1:1.8.0.181-1jpp.2.el7.x86_64",
"relates_to_product_reference": "7ComputeNode-OracleJava-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-oracle-javafx-1:1.8.0.181-1jpp.2.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Compute Node (v. 7)",
"product_id": "7ComputeNode-OracleJava-7.5.Z:java-1.8.0-oracle-javafx-1:1.8.0.181-1jpp.2.el7.x86_64"
},
"product_reference": "java-1.8.0-oracle-javafx-1:1.8.0.181-1jpp.2.el7.x86_64",
"relates_to_product_reference": "7ComputeNode-OracleJava-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-oracle-jdbc-1:1.8.0.181-1jpp.2.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Compute Node (v. 7)",
"product_id": "7ComputeNode-OracleJava-7.5.Z:java-1.8.0-oracle-jdbc-1:1.8.0.181-1jpp.2.el7.x86_64"
},
"product_reference": "java-1.8.0-oracle-jdbc-1:1.8.0.181-1jpp.2.el7.x86_64",
"relates_to_product_reference": "7ComputeNode-OracleJava-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-oracle-plugin-1:1.8.0.181-1jpp.2.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Compute Node (v. 7)",
"product_id": "7ComputeNode-OracleJava-7.5.Z:java-1.8.0-oracle-plugin-1:1.8.0.181-1jpp.2.el7.x86_64"
},
"product_reference": "java-1.8.0-oracle-plugin-1:1.8.0.181-1jpp.2.el7.x86_64",
"relates_to_product_reference": "7ComputeNode-OracleJava-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-oracle-src-1:1.8.0.181-1jpp.2.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Compute Node (v. 7)",
"product_id": "7ComputeNode-OracleJava-7.5.Z:java-1.8.0-oracle-src-1:1.8.0.181-1jpp.2.el7.x86_64"
},
"product_reference": "java-1.8.0-oracle-src-1:1.8.0.181-1jpp.2.el7.x86_64",
"relates_to_product_reference": "7ComputeNode-OracleJava-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-OracleJava-7.5.Z:java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el7.x86_64"
},
"product_reference": "java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el7.x86_64",
"relates_to_product_reference": "7Server-OracleJava-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-oracle-devel-1:1.8.0.181-1jpp.2.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-OracleJava-7.5.Z:java-1.8.0-oracle-devel-1:1.8.0.181-1jpp.2.el7.x86_64"
},
"product_reference": "java-1.8.0-oracle-devel-1:1.8.0.181-1jpp.2.el7.x86_64",
"relates_to_product_reference": "7Server-OracleJava-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-oracle-javafx-1:1.8.0.181-1jpp.2.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-OracleJava-7.5.Z:java-1.8.0-oracle-javafx-1:1.8.0.181-1jpp.2.el7.x86_64"
},
"product_reference": "java-1.8.0-oracle-javafx-1:1.8.0.181-1jpp.2.el7.x86_64",
"relates_to_product_reference": "7Server-OracleJava-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-oracle-jdbc-1:1.8.0.181-1jpp.2.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-OracleJava-7.5.Z:java-1.8.0-oracle-jdbc-1:1.8.0.181-1jpp.2.el7.x86_64"
},
"product_reference": "java-1.8.0-oracle-jdbc-1:1.8.0.181-1jpp.2.el7.x86_64",
"relates_to_product_reference": "7Server-OracleJava-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-oracle-plugin-1:1.8.0.181-1jpp.2.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-OracleJava-7.5.Z:java-1.8.0-oracle-plugin-1:1.8.0.181-1jpp.2.el7.x86_64"
},
"product_reference": "java-1.8.0-oracle-plugin-1:1.8.0.181-1jpp.2.el7.x86_64",
"relates_to_product_reference": "7Server-OracleJava-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-oracle-src-1:1.8.0.181-1jpp.2.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-OracleJava-7.5.Z:java-1.8.0-oracle-src-1:1.8.0.181-1jpp.2.el7.x86_64"
},
"product_reference": "java-1.8.0-oracle-src-1:1.8.0.181-1jpp.2.el7.x86_64",
"relates_to_product_reference": "7Server-OracleJava-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-OracleJava-7.5.Z:java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el7.x86_64"
},
"product_reference": "java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el7.x86_64",
"relates_to_product_reference": "7Workstation-OracleJava-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-oracle-devel-1:1.8.0.181-1jpp.2.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-OracleJava-7.5.Z:java-1.8.0-oracle-devel-1:1.8.0.181-1jpp.2.el7.x86_64"
},
"product_reference": "java-1.8.0-oracle-devel-1:1.8.0.181-1jpp.2.el7.x86_64",
"relates_to_product_reference": "7Workstation-OracleJava-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-oracle-javafx-1:1.8.0.181-1jpp.2.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-OracleJava-7.5.Z:java-1.8.0-oracle-javafx-1:1.8.0.181-1jpp.2.el7.x86_64"
},
"product_reference": "java-1.8.0-oracle-javafx-1:1.8.0.181-1jpp.2.el7.x86_64",
"relates_to_product_reference": "7Workstation-OracleJava-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-oracle-jdbc-1:1.8.0.181-1jpp.2.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-OracleJava-7.5.Z:java-1.8.0-oracle-jdbc-1:1.8.0.181-1jpp.2.el7.x86_64"
},
"product_reference": "java-1.8.0-oracle-jdbc-1:1.8.0.181-1jpp.2.el7.x86_64",
"relates_to_product_reference": "7Workstation-OracleJava-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-oracle-plugin-1:1.8.0.181-1jpp.2.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-OracleJava-7.5.Z:java-1.8.0-oracle-plugin-1:1.8.0.181-1jpp.2.el7.x86_64"
},
"product_reference": "java-1.8.0-oracle-plugin-1:1.8.0.181-1jpp.2.el7.x86_64",
"relates_to_product_reference": "7Workstation-OracleJava-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-oracle-src-1:1.8.0.181-1jpp.2.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-OracleJava-7.5.Z:java-1.8.0-oracle-src-1:1.8.0.181-1jpp.2.el7.x86_64"
},
"product_reference": "java-1.8.0-oracle-src-1:1.8.0.181-1jpp.2.el7.x86_64",
"relates_to_product_reference": "7Workstation-OracleJava-7.5.Z"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2018-2940",
"discovery_date": "2018-07-17T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1602146"
}
],
"notes": [
{
"category": "description",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries). Supported versions that are affected are Java SE: 6u191, 7u181, 8u172 and 10.0.1; Java SE Embedded: 8u171. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 4.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "JDK: unspecified vulnerability fixed in 6u201, 7u191, 8u181, and 10.0.2 (Libraries)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Client-OracleJava-7.5.Z:java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.8.0-oracle-devel-1:1.8.0.181-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.8.0-oracle-javafx-1:1.8.0.181-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.8.0-oracle-jdbc-1:1.8.0.181-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.8.0-oracle-plugin-1:1.8.0.181-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.8.0-oracle-src-1:1.8.0.181-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.8.0-oracle-devel-1:1.8.0.181-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.8.0-oracle-javafx-1:1.8.0.181-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.8.0-oracle-jdbc-1:1.8.0.181-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.8.0-oracle-plugin-1:1.8.0.181-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.8.0-oracle-src-1:1.8.0.181-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.8.0-oracle-devel-1:1.8.0.181-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.8.0-oracle-javafx-1:1.8.0.181-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.8.0-oracle-jdbc-1:1.8.0.181-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.8.0-oracle-plugin-1:1.8.0.181-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.8.0-oracle-src-1:1.8.0.181-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.8.0-oracle-devel-1:1.8.0.181-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.8.0-oracle-javafx-1:1.8.0.181-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.8.0-oracle-jdbc-1:1.8.0.181-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.8.0-oracle-plugin-1:1.8.0.181-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.8.0-oracle-src-1:1.8.0.181-1jpp.2.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-2940"
},
{
"category": "external",
"summary": "RHBZ#1602146",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1602146"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-2940",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-2940"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2940",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2940"
},
{
"category": "external",
"summary": "http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html#AppendixJAVA",
"url": "http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html#AppendixJAVA"
}
],
"release_date": "2018-07-17T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-07-24T21:13:37+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.",
"product_ids": [
"7Client-OracleJava-7.5.Z:java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.8.0-oracle-devel-1:1.8.0.181-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.8.0-oracle-javafx-1:1.8.0.181-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.8.0-oracle-jdbc-1:1.8.0.181-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.8.0-oracle-plugin-1:1.8.0.181-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.8.0-oracle-src-1:1.8.0.181-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.8.0-oracle-devel-1:1.8.0.181-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.8.0-oracle-javafx-1:1.8.0.181-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.8.0-oracle-jdbc-1:1.8.0.181-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.8.0-oracle-plugin-1:1.8.0.181-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.8.0-oracle-src-1:1.8.0.181-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.8.0-oracle-devel-1:1.8.0.181-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.8.0-oracle-javafx-1:1.8.0.181-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.8.0-oracle-jdbc-1:1.8.0.181-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.8.0-oracle-plugin-1:1.8.0.181-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.8.0-oracle-src-1:1.8.0.181-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.8.0-oracle-devel-1:1.8.0.181-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.8.0-oracle-javafx-1:1.8.0.181-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.8.0-oracle-jdbc-1:1.8.0.181-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.8.0-oracle-plugin-1:1.8.0.181-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.8.0-oracle-src-1:1.8.0.181-1jpp.2.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:2253"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"7Client-OracleJava-7.5.Z:java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.8.0-oracle-devel-1:1.8.0.181-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.8.0-oracle-javafx-1:1.8.0.181-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.8.0-oracle-jdbc-1:1.8.0.181-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.8.0-oracle-plugin-1:1.8.0.181-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.8.0-oracle-src-1:1.8.0.181-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.8.0-oracle-devel-1:1.8.0.181-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.8.0-oracle-javafx-1:1.8.0.181-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.8.0-oracle-jdbc-1:1.8.0.181-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.8.0-oracle-plugin-1:1.8.0.181-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.8.0-oracle-src-1:1.8.0.181-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.8.0-oracle-devel-1:1.8.0.181-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.8.0-oracle-javafx-1:1.8.0.181-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.8.0-oracle-jdbc-1:1.8.0.181-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.8.0-oracle-plugin-1:1.8.0.181-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.8.0-oracle-src-1:1.8.0.181-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.8.0-oracle-devel-1:1.8.0.181-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.8.0-oracle-javafx-1:1.8.0.181-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.8.0-oracle-jdbc-1:1.8.0.181-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.8.0-oracle-plugin-1:1.8.0.181-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.8.0-oracle-src-1:1.8.0.181-1jpp.2.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "JDK: unspecified vulnerability fixed in 6u201, 7u191, 8u181, and 10.0.2 (Libraries)"
},
{
"cve": "CVE-2018-2941",
"discovery_date": "2018-07-17T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1602143"
}
],
"notes": [
{
"category": "description",
"text": "Vulnerability in the Java SE component of Oracle Java SE (subcomponent: JavaFX). Supported versions that are affected are Java SE: 7u181, 8u172 and 10.0.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 8.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "JDK: unspecified vulnerability fixed in 7u191, 8u181, and 10.0.2 (JavaFX)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Client-OracleJava-7.5.Z:java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.8.0-oracle-devel-1:1.8.0.181-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.8.0-oracle-javafx-1:1.8.0.181-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.8.0-oracle-jdbc-1:1.8.0.181-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.8.0-oracle-plugin-1:1.8.0.181-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.8.0-oracle-src-1:1.8.0.181-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.8.0-oracle-devel-1:1.8.0.181-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.8.0-oracle-javafx-1:1.8.0.181-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.8.0-oracle-jdbc-1:1.8.0.181-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.8.0-oracle-plugin-1:1.8.0.181-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.8.0-oracle-src-1:1.8.0.181-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.8.0-oracle-devel-1:1.8.0.181-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.8.0-oracle-javafx-1:1.8.0.181-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.8.0-oracle-jdbc-1:1.8.0.181-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.8.0-oracle-plugin-1:1.8.0.181-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.8.0-oracle-src-1:1.8.0.181-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.8.0-oracle-devel-1:1.8.0.181-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.8.0-oracle-javafx-1:1.8.0.181-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.8.0-oracle-jdbc-1:1.8.0.181-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.8.0-oracle-plugin-1:1.8.0.181-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.8.0-oracle-src-1:1.8.0.181-1jpp.2.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-2941"
},
{
"category": "external",
"summary": "RHBZ#1602143",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1602143"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-2941",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-2941"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2941",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2941"
},
{
"category": "external",
"summary": "http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html#AppendixJAVA",
"url": "http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html#AppendixJAVA"
}
],
"release_date": "2018-07-17T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-07-24T21:13:37+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.",
"product_ids": [
"7Client-OracleJava-7.5.Z:java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.8.0-oracle-devel-1:1.8.0.181-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.8.0-oracle-javafx-1:1.8.0.181-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.8.0-oracle-jdbc-1:1.8.0.181-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.8.0-oracle-plugin-1:1.8.0.181-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.8.0-oracle-src-1:1.8.0.181-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.8.0-oracle-devel-1:1.8.0.181-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.8.0-oracle-javafx-1:1.8.0.181-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.8.0-oracle-jdbc-1:1.8.0.181-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.8.0-oracle-plugin-1:1.8.0.181-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.8.0-oracle-src-1:1.8.0.181-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.8.0-oracle-devel-1:1.8.0.181-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.8.0-oracle-javafx-1:1.8.0.181-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.8.0-oracle-jdbc-1:1.8.0.181-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.8.0-oracle-plugin-1:1.8.0.181-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.8.0-oracle-src-1:1.8.0.181-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.8.0-oracle-devel-1:1.8.0.181-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.8.0-oracle-javafx-1:1.8.0.181-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.8.0-oracle-jdbc-1:1.8.0.181-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.8.0-oracle-plugin-1:1.8.0.181-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.8.0-oracle-src-1:1.8.0.181-1jpp.2.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:2253"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"7Client-OracleJava-7.5.Z:java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.8.0-oracle-devel-1:1.8.0.181-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.8.0-oracle-javafx-1:1.8.0.181-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.8.0-oracle-jdbc-1:1.8.0.181-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.8.0-oracle-plugin-1:1.8.0.181-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.8.0-oracle-src-1:1.8.0.181-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.8.0-oracle-devel-1:1.8.0.181-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.8.0-oracle-javafx-1:1.8.0.181-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.8.0-oracle-jdbc-1:1.8.0.181-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.8.0-oracle-plugin-1:1.8.0.181-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.8.0-oracle-src-1:1.8.0.181-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.8.0-oracle-devel-1:1.8.0.181-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.8.0-oracle-javafx-1:1.8.0.181-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.8.0-oracle-jdbc-1:1.8.0.181-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.8.0-oracle-plugin-1:1.8.0.181-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.8.0-oracle-src-1:1.8.0.181-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.8.0-oracle-devel-1:1.8.0.181-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.8.0-oracle-javafx-1:1.8.0.181-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.8.0-oracle-jdbc-1:1.8.0.181-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.8.0-oracle-plugin-1:1.8.0.181-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.8.0-oracle-src-1:1.8.0.181-1jpp.2.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "JDK: unspecified vulnerability fixed in 7u191, 8u181, and 10.0.2 (JavaFX)"
},
{
"cve": "CVE-2018-2952",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2018-07-11T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1600925"
}
],
"notes": [
{
"category": "description",
"text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Concurrency). Supported versions that are affected are Java SE: 6u191, 7u181, 8u172 and 10.0.1; Java SE Embedded: 8u171; JRockit: R28.3.18. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 3.7 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK: insufficient index validation in PatternSyntaxException getMessage() (Concurrency, 8199547)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Client-OracleJava-7.5.Z:java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.8.0-oracle-devel-1:1.8.0.181-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.8.0-oracle-javafx-1:1.8.0.181-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.8.0-oracle-jdbc-1:1.8.0.181-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.8.0-oracle-plugin-1:1.8.0.181-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.8.0-oracle-src-1:1.8.0.181-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.8.0-oracle-devel-1:1.8.0.181-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.8.0-oracle-javafx-1:1.8.0.181-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.8.0-oracle-jdbc-1:1.8.0.181-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.8.0-oracle-plugin-1:1.8.0.181-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.8.0-oracle-src-1:1.8.0.181-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.8.0-oracle-devel-1:1.8.0.181-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.8.0-oracle-javafx-1:1.8.0.181-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.8.0-oracle-jdbc-1:1.8.0.181-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.8.0-oracle-plugin-1:1.8.0.181-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.8.0-oracle-src-1:1.8.0.181-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.8.0-oracle-devel-1:1.8.0.181-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.8.0-oracle-javafx-1:1.8.0.181-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.8.0-oracle-jdbc-1:1.8.0.181-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.8.0-oracle-plugin-1:1.8.0.181-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.8.0-oracle-src-1:1.8.0.181-1jpp.2.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-2952"
},
{
"category": "external",
"summary": "RHBZ#1600925",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1600925"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-2952",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-2952"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2952",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2952"
}
],
"release_date": "2018-07-17T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-07-24T21:13:37+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.",
"product_ids": [
"7Client-OracleJava-7.5.Z:java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.8.0-oracle-devel-1:1.8.0.181-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.8.0-oracle-javafx-1:1.8.0.181-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.8.0-oracle-jdbc-1:1.8.0.181-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.8.0-oracle-plugin-1:1.8.0.181-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.8.0-oracle-src-1:1.8.0.181-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.8.0-oracle-devel-1:1.8.0.181-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.8.0-oracle-javafx-1:1.8.0.181-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.8.0-oracle-jdbc-1:1.8.0.181-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.8.0-oracle-plugin-1:1.8.0.181-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.8.0-oracle-src-1:1.8.0.181-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.8.0-oracle-devel-1:1.8.0.181-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.8.0-oracle-javafx-1:1.8.0.181-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.8.0-oracle-jdbc-1:1.8.0.181-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.8.0-oracle-plugin-1:1.8.0.181-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.8.0-oracle-src-1:1.8.0.181-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.8.0-oracle-devel-1:1.8.0.181-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.8.0-oracle-javafx-1:1.8.0.181-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.8.0-oracle-jdbc-1:1.8.0.181-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.8.0-oracle-plugin-1:1.8.0.181-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.8.0-oracle-src-1:1.8.0.181-1jpp.2.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:2253"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 3.7,
"baseSeverity": "LOW",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"7Client-OracleJava-7.5.Z:java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.8.0-oracle-devel-1:1.8.0.181-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.8.0-oracle-javafx-1:1.8.0.181-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.8.0-oracle-jdbc-1:1.8.0.181-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.8.0-oracle-plugin-1:1.8.0.181-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.8.0-oracle-src-1:1.8.0.181-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.8.0-oracle-devel-1:1.8.0.181-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.8.0-oracle-javafx-1:1.8.0.181-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.8.0-oracle-jdbc-1:1.8.0.181-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.8.0-oracle-plugin-1:1.8.0.181-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.8.0-oracle-src-1:1.8.0.181-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.8.0-oracle-devel-1:1.8.0.181-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.8.0-oracle-javafx-1:1.8.0.181-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.8.0-oracle-jdbc-1:1.8.0.181-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.8.0-oracle-plugin-1:1.8.0.181-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.8.0-oracle-src-1:1.8.0.181-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.8.0-oracle-devel-1:1.8.0.181-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.8.0-oracle-javafx-1:1.8.0.181-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.8.0-oracle-jdbc-1:1.8.0.181-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.8.0-oracle-plugin-1:1.8.0.181-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.8.0-oracle-src-1:1.8.0.181-1jpp.2.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "OpenJDK: insufficient index validation in PatternSyntaxException getMessage() (Concurrency, 8199547)"
},
{
"cve": "CVE-2018-2964",
"discovery_date": "2018-07-17T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1602142"
}
],
"notes": [
{
"category": "description",
"text": "Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Deployment). Supported versions that are affected are Java SE: 8u172 and 10.0.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 8.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "JDK: unspecified vulnerability fixed in 8u181 and 10.0.2 (Deployment)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Client-OracleJava-7.5.Z:java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.8.0-oracle-devel-1:1.8.0.181-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.8.0-oracle-javafx-1:1.8.0.181-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.8.0-oracle-jdbc-1:1.8.0.181-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.8.0-oracle-plugin-1:1.8.0.181-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.8.0-oracle-src-1:1.8.0.181-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.8.0-oracle-devel-1:1.8.0.181-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.8.0-oracle-javafx-1:1.8.0.181-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.8.0-oracle-jdbc-1:1.8.0.181-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.8.0-oracle-plugin-1:1.8.0.181-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.8.0-oracle-src-1:1.8.0.181-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.8.0-oracle-devel-1:1.8.0.181-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.8.0-oracle-javafx-1:1.8.0.181-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.8.0-oracle-jdbc-1:1.8.0.181-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.8.0-oracle-plugin-1:1.8.0.181-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.8.0-oracle-src-1:1.8.0.181-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.8.0-oracle-devel-1:1.8.0.181-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.8.0-oracle-javafx-1:1.8.0.181-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.8.0-oracle-jdbc-1:1.8.0.181-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.8.0-oracle-plugin-1:1.8.0.181-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.8.0-oracle-src-1:1.8.0.181-1jpp.2.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-2964"
},
{
"category": "external",
"summary": "RHBZ#1602142",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1602142"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-2964",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-2964"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2964",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2964"
},
{
"category": "external",
"summary": "http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html#AppendixJAVA",
"url": "http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html#AppendixJAVA"
}
],
"release_date": "2018-07-17T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-07-24T21:13:37+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.",
"product_ids": [
"7Client-OracleJava-7.5.Z:java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.8.0-oracle-devel-1:1.8.0.181-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.8.0-oracle-javafx-1:1.8.0.181-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.8.0-oracle-jdbc-1:1.8.0.181-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.8.0-oracle-plugin-1:1.8.0.181-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.8.0-oracle-src-1:1.8.0.181-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.8.0-oracle-devel-1:1.8.0.181-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.8.0-oracle-javafx-1:1.8.0.181-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.8.0-oracle-jdbc-1:1.8.0.181-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.8.0-oracle-plugin-1:1.8.0.181-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.8.0-oracle-src-1:1.8.0.181-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.8.0-oracle-devel-1:1.8.0.181-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.8.0-oracle-javafx-1:1.8.0.181-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.8.0-oracle-jdbc-1:1.8.0.181-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.8.0-oracle-plugin-1:1.8.0.181-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.8.0-oracle-src-1:1.8.0.181-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.8.0-oracle-devel-1:1.8.0.181-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.8.0-oracle-javafx-1:1.8.0.181-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.8.0-oracle-jdbc-1:1.8.0.181-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.8.0-oracle-plugin-1:1.8.0.181-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.8.0-oracle-src-1:1.8.0.181-1jpp.2.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:2253"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"7Client-OracleJava-7.5.Z:java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.8.0-oracle-devel-1:1.8.0.181-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.8.0-oracle-javafx-1:1.8.0.181-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.8.0-oracle-jdbc-1:1.8.0.181-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.8.0-oracle-plugin-1:1.8.0.181-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.8.0-oracle-src-1:1.8.0.181-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.8.0-oracle-devel-1:1.8.0.181-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.8.0-oracle-javafx-1:1.8.0.181-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.8.0-oracle-jdbc-1:1.8.0.181-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.8.0-oracle-plugin-1:1.8.0.181-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.8.0-oracle-src-1:1.8.0.181-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.8.0-oracle-devel-1:1.8.0.181-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.8.0-oracle-javafx-1:1.8.0.181-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.8.0-oracle-jdbc-1:1.8.0.181-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.8.0-oracle-plugin-1:1.8.0.181-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.8.0-oracle-src-1:1.8.0.181-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.8.0-oracle-devel-1:1.8.0.181-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.8.0-oracle-javafx-1:1.8.0.181-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.8.0-oracle-jdbc-1:1.8.0.181-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.8.0-oracle-plugin-1:1.8.0.181-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.8.0-oracle-src-1:1.8.0.181-1jpp.2.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "JDK: unspecified vulnerability fixed in 8u181 and 10.0.2 (Deployment)"
},
{
"cve": "CVE-2018-2973",
"discovery_date": "2018-07-17T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1602145"
}
],
"notes": [
{
"category": "description",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: JSSE). Supported versions that are affected are Java SE: 6u191, 7u181, 8u172 and 10.0.1; Java SE Embedded: 8u171. Difficult to exploit vulnerability allows unauthenticated attacker with network access via SSL/TLS to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 5.9 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "JDK: unspecified vulnerability fixed in 6u201, 7u191, 8u181, and 10.0.2 (JSSE)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Client-OracleJava-7.5.Z:java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.8.0-oracle-devel-1:1.8.0.181-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.8.0-oracle-javafx-1:1.8.0.181-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.8.0-oracle-jdbc-1:1.8.0.181-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.8.0-oracle-plugin-1:1.8.0.181-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.8.0-oracle-src-1:1.8.0.181-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.8.0-oracle-devel-1:1.8.0.181-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.8.0-oracle-javafx-1:1.8.0.181-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.8.0-oracle-jdbc-1:1.8.0.181-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.8.0-oracle-plugin-1:1.8.0.181-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.8.0-oracle-src-1:1.8.0.181-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.8.0-oracle-devel-1:1.8.0.181-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.8.0-oracle-javafx-1:1.8.0.181-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.8.0-oracle-jdbc-1:1.8.0.181-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.8.0-oracle-plugin-1:1.8.0.181-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.8.0-oracle-src-1:1.8.0.181-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.8.0-oracle-devel-1:1.8.0.181-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.8.0-oracle-javafx-1:1.8.0.181-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.8.0-oracle-jdbc-1:1.8.0.181-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.8.0-oracle-plugin-1:1.8.0.181-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.8.0-oracle-src-1:1.8.0.181-1jpp.2.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-2973"
},
{
"category": "external",
"summary": "RHBZ#1602145",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1602145"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-2973",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-2973"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2973",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2973"
},
{
"category": "external",
"summary": "http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html#AppendixJAVA",
"url": "http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html#AppendixJAVA"
}
],
"release_date": "2018-07-17T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-07-24T21:13:37+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.",
"product_ids": [
"7Client-OracleJava-7.5.Z:java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.8.0-oracle-devel-1:1.8.0.181-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.8.0-oracle-javafx-1:1.8.0.181-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.8.0-oracle-jdbc-1:1.8.0.181-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.8.0-oracle-plugin-1:1.8.0.181-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.8.0-oracle-src-1:1.8.0.181-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.8.0-oracle-devel-1:1.8.0.181-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.8.0-oracle-javafx-1:1.8.0.181-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.8.0-oracle-jdbc-1:1.8.0.181-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.8.0-oracle-plugin-1:1.8.0.181-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.8.0-oracle-src-1:1.8.0.181-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.8.0-oracle-devel-1:1.8.0.181-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.8.0-oracle-javafx-1:1.8.0.181-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.8.0-oracle-jdbc-1:1.8.0.181-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.8.0-oracle-plugin-1:1.8.0.181-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.8.0-oracle-src-1:1.8.0.181-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.8.0-oracle-devel-1:1.8.0.181-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.8.0-oracle-javafx-1:1.8.0.181-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.8.0-oracle-jdbc-1:1.8.0.181-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.8.0-oracle-plugin-1:1.8.0.181-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.8.0-oracle-src-1:1.8.0.181-1jpp.2.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:2253"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.0"
},
"products": [
"7Client-OracleJava-7.5.Z:java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.8.0-oracle-devel-1:1.8.0.181-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.8.0-oracle-javafx-1:1.8.0.181-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.8.0-oracle-jdbc-1:1.8.0.181-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.8.0-oracle-plugin-1:1.8.0.181-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.8.0-oracle-src-1:1.8.0.181-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.8.0-oracle-devel-1:1.8.0.181-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.8.0-oracle-javafx-1:1.8.0.181-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.8.0-oracle-jdbc-1:1.8.0.181-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.8.0-oracle-plugin-1:1.8.0.181-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.8.0-oracle-src-1:1.8.0.181-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.8.0-oracle-devel-1:1.8.0.181-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.8.0-oracle-javafx-1:1.8.0.181-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.8.0-oracle-jdbc-1:1.8.0.181-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.8.0-oracle-plugin-1:1.8.0.181-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.8.0-oracle-src-1:1.8.0.181-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.8.0-oracle-devel-1:1.8.0.181-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.8.0-oracle-javafx-1:1.8.0.181-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.8.0-oracle-jdbc-1:1.8.0.181-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.8.0-oracle-plugin-1:1.8.0.181-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.8.0-oracle-src-1:1.8.0.181-1jpp.2.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "JDK: unspecified vulnerability fixed in 6u201, 7u191, 8u181, and 10.0.2 (JSSE)"
}
]
}
rhsa-2018:2242
Vulnerability from csaf_redhat
Published
2018-07-23 15:20
Modified
2025-08-03 18:28
Summary
Red Hat Security Advisory: java-1.8.0-openjdk security and bug fix update
Notes
Topic
An update for java-1.8.0-openjdk is now available for Red Hat Enterprise Linux 7.
Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
The java-1.8.0-openjdk packages provide the OpenJDK 8 Java Runtime Environment and the OpenJDK 8 Java Software Development Kit.
Security Fix(es):
* OpenJDK: insufficient index validation in PatternSyntaxException getMessage() (Concurrency, 8199547) (CVE-2018-2952)
For more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section.
Note: If the web browser plug-in provided by the icedtea-web package was installed, the issues exposed via Java applets could have been exploited without user interaction if a user visited a malicious website.
Bug Fix(es):
* This update applies changes from OpenJDK upstream version 8u172, which provides a number of bug fixes over the previous version, 8u171. (BZ#1588364)
* OpenJDK was recently updated to support reading the system certificate authority database (cacerts) directly. As an unintended consequence, this removed the ability to read certificates from the user-provided jssecacerts file. With this update, that ability is restored by reading from that file first, if available. (BZ#1593737)
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for java-1.8.0-openjdk is now available for Red Hat Enterprise Linux 7.\n\nRed Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "The java-1.8.0-openjdk packages provide the OpenJDK 8 Java Runtime Environment and the OpenJDK 8 Java Software Development Kit.\n\nSecurity Fix(es):\n\n* OpenJDK: insufficient index validation in PatternSyntaxException getMessage() (Concurrency, 8199547) (CVE-2018-2952)\n\nFor more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section.\n\nNote: If the web browser plug-in provided by the icedtea-web package was installed, the issues exposed via Java applets could have been exploited without user interaction if a user visited a malicious website.\n\nBug Fix(es):\n\n* This update applies changes from OpenJDK upstream version 8u172, which provides a number of bug fixes over the previous version, 8u171. (BZ#1588364)\n\n* OpenJDK was recently updated to support reading the system certificate authority database (cacerts) directly. As an unintended consequence, this removed the ability to read certificates from the user-provided jssecacerts file. With this update, that ability is restored by reading from that file first, if available. (BZ#1593737)",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2018:2242",
"url": "https://access.redhat.com/errata/RHSA-2018:2242"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#moderate",
"url": "https://access.redhat.com/security/updates/classification/#moderate"
},
{
"category": "external",
"summary": "1588364",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1588364"
},
{
"category": "external",
"summary": "1593737",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1593737"
},
{
"category": "external",
"summary": "1600925",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1600925"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_2242.json"
}
],
"title": "Red Hat Security Advisory: java-1.8.0-openjdk security and bug fix update",
"tracking": {
"current_release_date": "2025-08-03T18:28:41+00:00",
"generator": {
"date": "2025-08-03T18:28:41+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.6.6"
}
},
"id": "RHSA-2018:2242",
"initial_release_date": "2018-07-23T15:20:25+00:00",
"revision_history": [
{
"date": "2018-07-23T15:20:25+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2018-07-23T15:20:25+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2025-08-03T18:28:41+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Client (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.5.Z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:7::client"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Client Optional (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.5.Z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:7::client"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux ComputeNode (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.5.Z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:7::computenode"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.5.Z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:7::computenode"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Server (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.5.Z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:7::server"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)",
"product_id": "7Server-Alt-7.5.Z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:7::server"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Server Optional (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.5.Z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:7::server"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)",
"product_id": "7Server-optional-Alt-7.5.Z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:7::server"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Workstation (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.5.Z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:7::workstation"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.5.Z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:7::workstation"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.x86_64",
"product": {
"name": "java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.x86_64",
"product_id": "java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-openjdk@1.8.0.181-3.b13.el7_5?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.x86_64",
"product": {
"name": "java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.x86_64",
"product_id": "java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-openjdk-headless@1.8.0.181-3.b13.el7_5?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.x86_64",
"product": {
"name": "java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.x86_64",
"product_id": "java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-openjdk-devel@1.8.0.181-3.b13.el7_5?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.x86_64",
"product": {
"name": "java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.x86_64",
"product_id": "java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-openjdk-debuginfo@1.8.0.181-3.b13.el7_5?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.x86_64",
"product": {
"name": "java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.x86_64",
"product_id": "java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-openjdk-src-debug@1.8.0.181-3.b13.el7_5?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.x86_64",
"product": {
"name": "java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.x86_64",
"product_id": "java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-openjdk-demo-debug@1.8.0.181-3.b13.el7_5?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.x86_64",
"product": {
"name": "java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.x86_64",
"product_id": "java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-openjdk-devel-debug@1.8.0.181-3.b13.el7_5?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.x86_64",
"product": {
"name": "java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.x86_64",
"product_id": "java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-openjdk-demo@1.8.0.181-3.b13.el7_5?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.x86_64",
"product": {
"name": "java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.x86_64",
"product_id": "java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-openjdk-headless-debug@1.8.0.181-3.b13.el7_5?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.x86_64",
"product": {
"name": "java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.x86_64",
"product_id": "java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-openjdk-accessibility-debug@1.8.0.181-3.b13.el7_5?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.x86_64",
"product": {
"name": "java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.x86_64",
"product_id": "java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-openjdk-debug@1.8.0.181-3.b13.el7_5?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.x86_64",
"product": {
"name": "java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.x86_64",
"product_id": "java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-openjdk-accessibility@1.8.0.181-3.b13.el7_5?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.x86_64",
"product": {
"name": "java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.x86_64",
"product_id": "java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-openjdk-src@1.8.0.181-3.b13.el7_5?arch=x86_64\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.i686",
"product": {
"name": "java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.i686",
"product_id": "java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-openjdk@1.8.0.181-3.b13.el7_5?arch=i686\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.i686",
"product": {
"name": "java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.i686",
"product_id": "java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-openjdk-headless@1.8.0.181-3.b13.el7_5?arch=i686\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.i686",
"product": {
"name": "java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.i686",
"product_id": "java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-openjdk-devel@1.8.0.181-3.b13.el7_5?arch=i686\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.i686",
"product": {
"name": "java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.i686",
"product_id": "java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-openjdk-debuginfo@1.8.0.181-3.b13.el7_5?arch=i686\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.i686",
"product": {
"name": "java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.i686",
"product_id": "java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-openjdk-src-debug@1.8.0.181-3.b13.el7_5?arch=i686\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.i686",
"product": {
"name": "java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.i686",
"product_id": "java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-openjdk-demo-debug@1.8.0.181-3.b13.el7_5?arch=i686\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.i686",
"product": {
"name": "java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.i686",
"product_id": "java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-openjdk-devel-debug@1.8.0.181-3.b13.el7_5?arch=i686\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.i686",
"product": {
"name": "java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.i686",
"product_id": "java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-openjdk-demo@1.8.0.181-3.b13.el7_5?arch=i686\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.i686",
"product": {
"name": "java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.i686",
"product_id": "java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-openjdk-headless-debug@1.8.0.181-3.b13.el7_5?arch=i686\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.i686",
"product": {
"name": "java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.i686",
"product_id": "java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-openjdk-accessibility-debug@1.8.0.181-3.b13.el7_5?arch=i686\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.i686",
"product": {
"name": "java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.i686",
"product_id": "java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-openjdk-debug@1.8.0.181-3.b13.el7_5?arch=i686\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.i686",
"product": {
"name": "java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.i686",
"product_id": "java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-openjdk-accessibility@1.8.0.181-3.b13.el7_5?arch=i686\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.i686",
"product": {
"name": "java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.i686",
"product_id": "java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-openjdk-src@1.8.0.181-3.b13.el7_5?arch=i686\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "i686"
},
{
"branches": [
{
"category": "product_version",
"name": "java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.src",
"product": {
"name": "java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.src",
"product_id": "java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-openjdk@1.8.0.181-3.b13.el7_5?arch=src\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "java-1.8.0-openjdk-javadoc-1:1.8.0.181-3.b13.el7_5.noarch",
"product": {
"name": "java-1.8.0-openjdk-javadoc-1:1.8.0.181-3.b13.el7_5.noarch",
"product_id": "java-1.8.0-openjdk-javadoc-1:1.8.0.181-3.b13.el7_5.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-openjdk-javadoc@1.8.0.181-3.b13.el7_5?arch=noarch\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-openjdk-javadoc-zip-debug-1:1.8.0.181-3.b13.el7_5.noarch",
"product": {
"name": "java-1.8.0-openjdk-javadoc-zip-debug-1:1.8.0.181-3.b13.el7_5.noarch",
"product_id": "java-1.8.0-openjdk-javadoc-zip-debug-1:1.8.0.181-3.b13.el7_5.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-openjdk-javadoc-zip-debug@1.8.0.181-3.b13.el7_5?arch=noarch\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-openjdk-javadoc-debug-1:1.8.0.181-3.b13.el7_5.noarch",
"product": {
"name": "java-1.8.0-openjdk-javadoc-debug-1:1.8.0.181-3.b13.el7_5.noarch",
"product_id": "java-1.8.0-openjdk-javadoc-debug-1:1.8.0.181-3.b13.el7_5.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-openjdk-javadoc-debug@1.8.0.181-3.b13.el7_5?arch=noarch\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-openjdk-javadoc-zip-1:1.8.0.181-3.b13.el7_5.noarch",
"product": {
"name": "java-1.8.0-openjdk-javadoc-zip-1:1.8.0.181-3.b13.el7_5.noarch",
"product_id": "java-1.8.0-openjdk-javadoc-zip-1:1.8.0.181-3.b13.el7_5.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-openjdk-javadoc-zip@1.8.0.181-3.b13.el7_5?arch=noarch\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "noarch"
},
{
"branches": [
{
"category": "product_version",
"name": "java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.ppc64le",
"product": {
"name": "java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.ppc64le",
"product_id": "java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-openjdk@1.8.0.181-3.b13.el7_5?arch=ppc64le\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.ppc64le",
"product": {
"name": "java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.ppc64le",
"product_id": "java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-openjdk-headless@1.8.0.181-3.b13.el7_5?arch=ppc64le\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.ppc64le",
"product": {
"name": "java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.ppc64le",
"product_id": "java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-openjdk-devel@1.8.0.181-3.b13.el7_5?arch=ppc64le\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.ppc64le",
"product": {
"name": "java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.ppc64le",
"product_id": "java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-openjdk-debuginfo@1.8.0.181-3.b13.el7_5?arch=ppc64le\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.ppc64le",
"product": {
"name": "java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.ppc64le",
"product_id": "java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-openjdk-src-debug@1.8.0.181-3.b13.el7_5?arch=ppc64le\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.ppc64le",
"product": {
"name": "java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.ppc64le",
"product_id": "java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-openjdk-demo-debug@1.8.0.181-3.b13.el7_5?arch=ppc64le\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.ppc64le",
"product": {
"name": "java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.ppc64le",
"product_id": "java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-openjdk-devel-debug@1.8.0.181-3.b13.el7_5?arch=ppc64le\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.ppc64le",
"product": {
"name": "java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.ppc64le",
"product_id": "java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-openjdk-demo@1.8.0.181-3.b13.el7_5?arch=ppc64le\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.ppc64le",
"product": {
"name": "java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.ppc64le",
"product_id": "java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-openjdk-headless-debug@1.8.0.181-3.b13.el7_5?arch=ppc64le\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.ppc64le",
"product": {
"name": "java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.ppc64le",
"product_id": "java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-openjdk-accessibility-debug@1.8.0.181-3.b13.el7_5?arch=ppc64le\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.ppc64le",
"product": {
"name": "java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.ppc64le",
"product_id": "java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-openjdk-debug@1.8.0.181-3.b13.el7_5?arch=ppc64le\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.ppc64le",
"product": {
"name": "java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.ppc64le",
"product_id": "java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-openjdk-accessibility@1.8.0.181-3.b13.el7_5?arch=ppc64le\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.ppc64le",
"product": {
"name": "java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.ppc64le",
"product_id": "java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-openjdk-src@1.8.0.181-3.b13.el7_5?arch=ppc64le\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.ppc64",
"product": {
"name": "java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.ppc64",
"product_id": "java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-openjdk@1.8.0.181-3.b13.el7_5?arch=ppc64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.ppc64",
"product": {
"name": "java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.ppc64",
"product_id": "java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-openjdk-headless@1.8.0.181-3.b13.el7_5?arch=ppc64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.ppc64",
"product": {
"name": "java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.ppc64",
"product_id": "java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-openjdk-devel@1.8.0.181-3.b13.el7_5?arch=ppc64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.ppc64",
"product": {
"name": "java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.ppc64",
"product_id": "java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-openjdk-debuginfo@1.8.0.181-3.b13.el7_5?arch=ppc64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.ppc64",
"product": {
"name": "java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.ppc64",
"product_id": "java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-openjdk-src-debug@1.8.0.181-3.b13.el7_5?arch=ppc64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.ppc64",
"product": {
"name": "java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.ppc64",
"product_id": "java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-openjdk-demo-debug@1.8.0.181-3.b13.el7_5?arch=ppc64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.ppc64",
"product": {
"name": "java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.ppc64",
"product_id": "java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-openjdk-devel-debug@1.8.0.181-3.b13.el7_5?arch=ppc64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.ppc64",
"product": {
"name": "java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.ppc64",
"product_id": "java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-openjdk-demo@1.8.0.181-3.b13.el7_5?arch=ppc64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.ppc64",
"product": {
"name": "java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.ppc64",
"product_id": "java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-openjdk-headless-debug@1.8.0.181-3.b13.el7_5?arch=ppc64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.ppc64",
"product": {
"name": "java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.ppc64",
"product_id": "java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-openjdk-accessibility-debug@1.8.0.181-3.b13.el7_5?arch=ppc64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.ppc64",
"product": {
"name": "java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.ppc64",
"product_id": "java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-openjdk-debug@1.8.0.181-3.b13.el7_5?arch=ppc64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.ppc64",
"product": {
"name": "java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.ppc64",
"product_id": "java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-openjdk-accessibility@1.8.0.181-3.b13.el7_5?arch=ppc64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.ppc64",
"product": {
"name": "java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.ppc64",
"product_id": "java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-openjdk-src@1.8.0.181-3.b13.el7_5?arch=ppc64\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "ppc64"
},
{
"branches": [
{
"category": "product_version",
"name": "java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.s390x",
"product": {
"name": "java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.s390x",
"product_id": "java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-openjdk@1.8.0.181-3.b13.el7_5?arch=s390x\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.s390x",
"product": {
"name": "java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.s390x",
"product_id": "java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-openjdk-headless@1.8.0.181-3.b13.el7_5?arch=s390x\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.s390x",
"product": {
"name": "java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.s390x",
"product_id": "java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-openjdk-devel@1.8.0.181-3.b13.el7_5?arch=s390x\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.s390x",
"product": {
"name": "java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.s390x",
"product_id": "java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-openjdk-debuginfo@1.8.0.181-3.b13.el7_5?arch=s390x\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.s390x",
"product": {
"name": "java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.s390x",
"product_id": "java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-openjdk-demo@1.8.0.181-3.b13.el7_5?arch=s390x\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.s390x",
"product": {
"name": "java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.s390x",
"product_id": "java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-openjdk-accessibility@1.8.0.181-3.b13.el7_5?arch=s390x\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.s390x",
"product": {
"name": "java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.s390x",
"product_id": "java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-openjdk-src@1.8.0.181-3.b13.el7_5?arch=s390x\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.aarch64",
"product": {
"name": "java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.aarch64",
"product_id": "java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-openjdk@1.8.0.181-3.b13.el7_5?arch=aarch64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.aarch64",
"product": {
"name": "java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.aarch64",
"product_id": "java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-openjdk-headless@1.8.0.181-3.b13.el7_5?arch=aarch64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.aarch64",
"product": {
"name": "java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.aarch64",
"product_id": "java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-openjdk-devel@1.8.0.181-3.b13.el7_5?arch=aarch64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.aarch64",
"product": {
"name": "java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.aarch64",
"product_id": "java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-openjdk-debuginfo@1.8.0.181-3.b13.el7_5?arch=aarch64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.aarch64",
"product": {
"name": "java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.aarch64",
"product_id": "java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-openjdk-src-debug@1.8.0.181-3.b13.el7_5?arch=aarch64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.aarch64",
"product": {
"name": "java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.aarch64",
"product_id": "java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-openjdk-demo-debug@1.8.0.181-3.b13.el7_5?arch=aarch64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.aarch64",
"product": {
"name": "java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.aarch64",
"product_id": "java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-openjdk-devel-debug@1.8.0.181-3.b13.el7_5?arch=aarch64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.aarch64",
"product": {
"name": "java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.aarch64",
"product_id": "java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-openjdk-demo@1.8.0.181-3.b13.el7_5?arch=aarch64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.aarch64",
"product": {
"name": "java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.aarch64",
"product_id": "java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-openjdk-headless-debug@1.8.0.181-3.b13.el7_5?arch=aarch64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.aarch64",
"product": {
"name": "java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.aarch64",
"product_id": "java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-openjdk-accessibility-debug@1.8.0.181-3.b13.el7_5?arch=aarch64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.aarch64",
"product": {
"name": "java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.aarch64",
"product_id": "java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-openjdk-debug@1.8.0.181-3.b13.el7_5?arch=aarch64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.aarch64",
"product": {
"name": "java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.aarch64",
"product_id": "java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-openjdk-accessibility@1.8.0.181-3.b13.el7_5?arch=aarch64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.aarch64",
"product": {
"name": "java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.aarch64",
"product_id": "java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-openjdk-src@1.8.0.181-3.b13.el7_5?arch=aarch64\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "aarch64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.aarch64 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.aarch64"
},
"product_reference": "java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.aarch64",
"relates_to_product_reference": "7Client-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.i686 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.i686"
},
"product_reference": "java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.i686",
"relates_to_product_reference": "7Client-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.ppc64 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.ppc64"
},
"product_reference": "java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.ppc64",
"relates_to_product_reference": "7Client-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.ppc64le as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.ppc64le"
},
"product_reference": "java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.ppc64le",
"relates_to_product_reference": "7Client-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.s390x as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.s390x"
},
"product_reference": "java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.s390x",
"relates_to_product_reference": "7Client-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.src as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.src"
},
"product_reference": "java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.src",
"relates_to_product_reference": "7Client-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.x86_64"
},
"product_reference": "java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.x86_64",
"relates_to_product_reference": "7Client-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.aarch64 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.5.Z:java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.aarch64"
},
"product_reference": "java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.aarch64",
"relates_to_product_reference": "7Client-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.i686 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.5.Z:java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.i686"
},
"product_reference": "java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.i686",
"relates_to_product_reference": "7Client-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.ppc64 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.5.Z:java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.ppc64"
},
"product_reference": "java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.ppc64",
"relates_to_product_reference": "7Client-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.ppc64le as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.5.Z:java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.ppc64le"
},
"product_reference": "java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.ppc64le",
"relates_to_product_reference": "7Client-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.s390x as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.5.Z:java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.s390x"
},
"product_reference": "java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.s390x",
"relates_to_product_reference": "7Client-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.5.Z:java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.x86_64"
},
"product_reference": "java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.x86_64",
"relates_to_product_reference": "7Client-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.aarch64 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.5.Z:java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.aarch64"
},
"product_reference": "java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.aarch64",
"relates_to_product_reference": "7Client-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.i686 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.5.Z:java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.i686"
},
"product_reference": "java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.i686",
"relates_to_product_reference": "7Client-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.ppc64 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.5.Z:java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.ppc64"
},
"product_reference": "java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.ppc64",
"relates_to_product_reference": "7Client-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.ppc64le as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.5.Z:java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.ppc64le"
},
"product_reference": "java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.ppc64le",
"relates_to_product_reference": "7Client-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.5.Z:java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.x86_64"
},
"product_reference": "java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.x86_64",
"relates_to_product_reference": "7Client-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.aarch64 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.5.Z:java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.aarch64"
},
"product_reference": "java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.aarch64",
"relates_to_product_reference": "7Client-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.i686 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.5.Z:java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.i686"
},
"product_reference": "java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.i686",
"relates_to_product_reference": "7Client-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.ppc64 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.5.Z:java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.ppc64"
},
"product_reference": "java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.ppc64",
"relates_to_product_reference": "7Client-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.ppc64le as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.5.Z:java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.ppc64le"
},
"product_reference": "java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.ppc64le",
"relates_to_product_reference": "7Client-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.5.Z:java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.x86_64"
},
"product_reference": "java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.x86_64",
"relates_to_product_reference": "7Client-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.aarch64 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.5.Z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.aarch64"
},
"product_reference": "java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.aarch64",
"relates_to_product_reference": "7Client-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.i686 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.5.Z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.i686"
},
"product_reference": "java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.i686",
"relates_to_product_reference": "7Client-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.ppc64 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.5.Z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.ppc64"
},
"product_reference": "java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.ppc64",
"relates_to_product_reference": "7Client-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.ppc64le as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.5.Z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.ppc64le"
},
"product_reference": "java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.ppc64le",
"relates_to_product_reference": "7Client-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.s390x as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.5.Z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.s390x"
},
"product_reference": "java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.s390x",
"relates_to_product_reference": "7Client-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.5.Z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.x86_64"
},
"product_reference": "java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.x86_64",
"relates_to_product_reference": "7Client-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.aarch64 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.5.Z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.aarch64"
},
"product_reference": "java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.aarch64",
"relates_to_product_reference": "7Client-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.i686 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.5.Z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.i686"
},
"product_reference": "java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.i686",
"relates_to_product_reference": "7Client-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.ppc64 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.5.Z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.ppc64"
},
"product_reference": "java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.ppc64",
"relates_to_product_reference": "7Client-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.ppc64le as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.5.Z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.ppc64le"
},
"product_reference": "java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.ppc64le",
"relates_to_product_reference": "7Client-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.s390x as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.5.Z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.s390x"
},
"product_reference": "java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.s390x",
"relates_to_product_reference": "7Client-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.5.Z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.x86_64"
},
"product_reference": "java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.x86_64",
"relates_to_product_reference": "7Client-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.aarch64 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.5.Z:java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.aarch64"
},
"product_reference": "java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.aarch64",
"relates_to_product_reference": "7Client-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.i686 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.5.Z:java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.i686"
},
"product_reference": "java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.i686",
"relates_to_product_reference": "7Client-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.ppc64 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.5.Z:java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.ppc64"
},
"product_reference": "java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.ppc64",
"relates_to_product_reference": "7Client-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.ppc64le as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.5.Z:java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.ppc64le"
},
"product_reference": "java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.ppc64le",
"relates_to_product_reference": "7Client-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.5.Z:java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.x86_64"
},
"product_reference": "java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.x86_64",
"relates_to_product_reference": "7Client-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.aarch64 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.5.Z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.aarch64"
},
"product_reference": "java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.aarch64",
"relates_to_product_reference": "7Client-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.i686 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.5.Z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.i686"
},
"product_reference": "java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.i686",
"relates_to_product_reference": "7Client-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.ppc64 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.5.Z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.ppc64"
},
"product_reference": "java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.ppc64",
"relates_to_product_reference": "7Client-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.ppc64le as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.5.Z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.ppc64le"
},
"product_reference": "java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.ppc64le",
"relates_to_product_reference": "7Client-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.s390x as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.5.Z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.s390x"
},
"product_reference": "java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.s390x",
"relates_to_product_reference": "7Client-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.5.Z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.x86_64"
},
"product_reference": "java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.x86_64",
"relates_to_product_reference": "7Client-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.aarch64 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.5.Z:java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.aarch64"
},
"product_reference": "java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.aarch64",
"relates_to_product_reference": "7Client-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.i686 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.5.Z:java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.i686"
},
"product_reference": "java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.i686",
"relates_to_product_reference": "7Client-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.ppc64 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.5.Z:java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.ppc64"
},
"product_reference": "java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.ppc64",
"relates_to_product_reference": "7Client-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.ppc64le as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.5.Z:java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.ppc64le"
},
"product_reference": "java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.ppc64le",
"relates_to_product_reference": "7Client-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.5.Z:java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.x86_64"
},
"product_reference": "java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.x86_64",
"relates_to_product_reference": "7Client-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.aarch64 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.5.Z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.aarch64"
},
"product_reference": "java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.aarch64",
"relates_to_product_reference": "7Client-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.i686 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.5.Z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.i686"
},
"product_reference": "java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.i686",
"relates_to_product_reference": "7Client-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.ppc64 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.5.Z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.ppc64"
},
"product_reference": "java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.ppc64",
"relates_to_product_reference": "7Client-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.ppc64le as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.5.Z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.ppc64le"
},
"product_reference": "java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.ppc64le",
"relates_to_product_reference": "7Client-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.s390x as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.5.Z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.s390x"
},
"product_reference": "java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.s390x",
"relates_to_product_reference": "7Client-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.5.Z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.x86_64"
},
"product_reference": "java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.x86_64",
"relates_to_product_reference": "7Client-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.aarch64 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.5.Z:java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.aarch64"
},
"product_reference": "java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.aarch64",
"relates_to_product_reference": "7Client-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.i686 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.5.Z:java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.i686"
},
"product_reference": "java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.i686",
"relates_to_product_reference": "7Client-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.ppc64 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.5.Z:java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.ppc64"
},
"product_reference": "java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.ppc64",
"relates_to_product_reference": "7Client-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.ppc64le as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.5.Z:java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.ppc64le"
},
"product_reference": "java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.ppc64le",
"relates_to_product_reference": "7Client-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.5.Z:java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.x86_64"
},
"product_reference": "java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.x86_64",
"relates_to_product_reference": "7Client-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-javadoc-1:1.8.0.181-3.b13.el7_5.noarch as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.5.Z:java-1.8.0-openjdk-javadoc-1:1.8.0.181-3.b13.el7_5.noarch"
},
"product_reference": "java-1.8.0-openjdk-javadoc-1:1.8.0.181-3.b13.el7_5.noarch",
"relates_to_product_reference": "7Client-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-javadoc-debug-1:1.8.0.181-3.b13.el7_5.noarch as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.5.Z:java-1.8.0-openjdk-javadoc-debug-1:1.8.0.181-3.b13.el7_5.noarch"
},
"product_reference": "java-1.8.0-openjdk-javadoc-debug-1:1.8.0.181-3.b13.el7_5.noarch",
"relates_to_product_reference": "7Client-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-javadoc-zip-1:1.8.0.181-3.b13.el7_5.noarch as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.5.Z:java-1.8.0-openjdk-javadoc-zip-1:1.8.0.181-3.b13.el7_5.noarch"
},
"product_reference": "java-1.8.0-openjdk-javadoc-zip-1:1.8.0.181-3.b13.el7_5.noarch",
"relates_to_product_reference": "7Client-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-javadoc-zip-debug-1:1.8.0.181-3.b13.el7_5.noarch as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.5.Z:java-1.8.0-openjdk-javadoc-zip-debug-1:1.8.0.181-3.b13.el7_5.noarch"
},
"product_reference": "java-1.8.0-openjdk-javadoc-zip-debug-1:1.8.0.181-3.b13.el7_5.noarch",
"relates_to_product_reference": "7Client-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.aarch64 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.5.Z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.aarch64"
},
"product_reference": "java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.aarch64",
"relates_to_product_reference": "7Client-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.i686 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.5.Z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.i686"
},
"product_reference": "java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.i686",
"relates_to_product_reference": "7Client-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.ppc64 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.5.Z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.ppc64"
},
"product_reference": "java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.ppc64",
"relates_to_product_reference": "7Client-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.ppc64le as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.5.Z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.ppc64le"
},
"product_reference": "java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.ppc64le",
"relates_to_product_reference": "7Client-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.s390x as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.5.Z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.s390x"
},
"product_reference": "java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.s390x",
"relates_to_product_reference": "7Client-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.5.Z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.x86_64"
},
"product_reference": "java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.x86_64",
"relates_to_product_reference": "7Client-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.aarch64 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.5.Z:java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.aarch64"
},
"product_reference": "java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.aarch64",
"relates_to_product_reference": "7Client-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.i686 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.5.Z:java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.i686"
},
"product_reference": "java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.i686",
"relates_to_product_reference": "7Client-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.ppc64 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.5.Z:java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.ppc64"
},
"product_reference": "java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.ppc64",
"relates_to_product_reference": "7Client-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.ppc64le as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.5.Z:java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.ppc64le"
},
"product_reference": "java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.ppc64le",
"relates_to_product_reference": "7Client-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.5.Z:java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.x86_64"
},
"product_reference": "java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.x86_64",
"relates_to_product_reference": "7Client-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.aarch64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.aarch64"
},
"product_reference": "java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.aarch64",
"relates_to_product_reference": "7Client-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.i686 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.i686"
},
"product_reference": "java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.i686",
"relates_to_product_reference": "7Client-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.ppc64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.ppc64"
},
"product_reference": "java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.ppc64",
"relates_to_product_reference": "7Client-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.ppc64le as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.ppc64le"
},
"product_reference": "java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.ppc64le",
"relates_to_product_reference": "7Client-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.s390x as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.s390x"
},
"product_reference": "java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.s390x",
"relates_to_product_reference": "7Client-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.src as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.src"
},
"product_reference": "java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.src",
"relates_to_product_reference": "7Client-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.x86_64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.x86_64"
},
"product_reference": "java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.x86_64",
"relates_to_product_reference": "7Client-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.aarch64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.5.Z:java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.aarch64"
},
"product_reference": "java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.aarch64",
"relates_to_product_reference": "7Client-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.i686 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.5.Z:java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.i686"
},
"product_reference": "java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.i686",
"relates_to_product_reference": "7Client-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.ppc64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.5.Z:java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.ppc64"
},
"product_reference": "java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.ppc64",
"relates_to_product_reference": "7Client-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.ppc64le as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.5.Z:java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.ppc64le"
},
"product_reference": "java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.ppc64le",
"relates_to_product_reference": "7Client-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.s390x as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.5.Z:java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.s390x"
},
"product_reference": "java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.s390x",
"relates_to_product_reference": "7Client-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.x86_64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.5.Z:java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.x86_64"
},
"product_reference": "java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.x86_64",
"relates_to_product_reference": "7Client-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.aarch64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.5.Z:java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.aarch64"
},
"product_reference": "java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.aarch64",
"relates_to_product_reference": "7Client-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.i686 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.5.Z:java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.i686"
},
"product_reference": "java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.i686",
"relates_to_product_reference": "7Client-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.ppc64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.5.Z:java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.ppc64"
},
"product_reference": "java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.ppc64",
"relates_to_product_reference": "7Client-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.ppc64le as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.5.Z:java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.ppc64le"
},
"product_reference": "java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.ppc64le",
"relates_to_product_reference": "7Client-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.x86_64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.5.Z:java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.x86_64"
},
"product_reference": "java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.x86_64",
"relates_to_product_reference": "7Client-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.aarch64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.5.Z:java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.aarch64"
},
"product_reference": "java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.aarch64",
"relates_to_product_reference": "7Client-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.i686 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.5.Z:java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.i686"
},
"product_reference": "java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.i686",
"relates_to_product_reference": "7Client-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.ppc64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.5.Z:java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.ppc64"
},
"product_reference": "java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.ppc64",
"relates_to_product_reference": "7Client-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.ppc64le as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.5.Z:java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.ppc64le"
},
"product_reference": "java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.ppc64le",
"relates_to_product_reference": "7Client-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.x86_64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.5.Z:java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.x86_64"
},
"product_reference": "java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.x86_64",
"relates_to_product_reference": "7Client-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.aarch64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.5.Z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.aarch64"
},
"product_reference": "java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.aarch64",
"relates_to_product_reference": "7Client-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.i686 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.5.Z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.i686"
},
"product_reference": "java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.i686",
"relates_to_product_reference": "7Client-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.ppc64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.5.Z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.ppc64"
},
"product_reference": "java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.ppc64",
"relates_to_product_reference": "7Client-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.ppc64le as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.5.Z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.ppc64le"
},
"product_reference": "java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.ppc64le",
"relates_to_product_reference": "7Client-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.s390x as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.5.Z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.s390x"
},
"product_reference": "java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.s390x",
"relates_to_product_reference": "7Client-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.x86_64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.5.Z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.x86_64"
},
"product_reference": "java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.x86_64",
"relates_to_product_reference": "7Client-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.aarch64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.5.Z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.aarch64"
},
"product_reference": "java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.aarch64",
"relates_to_product_reference": "7Client-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.i686 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.5.Z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.i686"
},
"product_reference": "java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.i686",
"relates_to_product_reference": "7Client-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.ppc64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.5.Z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.ppc64"
},
"product_reference": "java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.ppc64",
"relates_to_product_reference": "7Client-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.ppc64le as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.5.Z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.ppc64le"
},
"product_reference": "java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.ppc64le",
"relates_to_product_reference": "7Client-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.s390x as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.5.Z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.s390x"
},
"product_reference": "java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.s390x",
"relates_to_product_reference": "7Client-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.x86_64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.5.Z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.x86_64"
},
"product_reference": "java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.x86_64",
"relates_to_product_reference": "7Client-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.aarch64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.5.Z:java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.aarch64"
},
"product_reference": "java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.aarch64",
"relates_to_product_reference": "7Client-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.i686 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.5.Z:java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.i686"
},
"product_reference": "java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.i686",
"relates_to_product_reference": "7Client-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.ppc64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.5.Z:java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.ppc64"
},
"product_reference": "java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.ppc64",
"relates_to_product_reference": "7Client-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.ppc64le as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.5.Z:java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.ppc64le"
},
"product_reference": "java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.ppc64le",
"relates_to_product_reference": "7Client-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.x86_64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.5.Z:java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.x86_64"
},
"product_reference": "java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.x86_64",
"relates_to_product_reference": "7Client-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.aarch64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.5.Z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.aarch64"
},
"product_reference": "java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.aarch64",
"relates_to_product_reference": "7Client-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.i686 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.5.Z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.i686"
},
"product_reference": "java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.i686",
"relates_to_product_reference": "7Client-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.ppc64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.5.Z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.ppc64"
},
"product_reference": "java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.ppc64",
"relates_to_product_reference": "7Client-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.ppc64le as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.5.Z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.ppc64le"
},
"product_reference": "java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.ppc64le",
"relates_to_product_reference": "7Client-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.s390x as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.5.Z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.s390x"
},
"product_reference": "java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.s390x",
"relates_to_product_reference": "7Client-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.x86_64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.5.Z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.x86_64"
},
"product_reference": "java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.x86_64",
"relates_to_product_reference": "7Client-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.aarch64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.5.Z:java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.aarch64"
},
"product_reference": "java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.aarch64",
"relates_to_product_reference": "7Client-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.i686 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.5.Z:java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.i686"
},
"product_reference": "java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.i686",
"relates_to_product_reference": "7Client-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.ppc64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.5.Z:java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.ppc64"
},
"product_reference": "java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.ppc64",
"relates_to_product_reference": "7Client-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.ppc64le as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.5.Z:java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.ppc64le"
},
"product_reference": "java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.ppc64le",
"relates_to_product_reference": "7Client-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.x86_64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.5.Z:java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.x86_64"
},
"product_reference": "java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.x86_64",
"relates_to_product_reference": "7Client-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.aarch64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.5.Z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.aarch64"
},
"product_reference": "java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.aarch64",
"relates_to_product_reference": "7Client-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.i686 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.5.Z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.i686"
},
"product_reference": "java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.i686",
"relates_to_product_reference": "7Client-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.ppc64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.5.Z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.ppc64"
},
"product_reference": "java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.ppc64",
"relates_to_product_reference": "7Client-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.ppc64le as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.5.Z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.ppc64le"
},
"product_reference": "java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.ppc64le",
"relates_to_product_reference": "7Client-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.s390x as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.5.Z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.s390x"
},
"product_reference": "java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.s390x",
"relates_to_product_reference": "7Client-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.x86_64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.5.Z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.x86_64"
},
"product_reference": "java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.x86_64",
"relates_to_product_reference": "7Client-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.aarch64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.5.Z:java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.aarch64"
},
"product_reference": "java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.aarch64",
"relates_to_product_reference": "7Client-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.i686 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.5.Z:java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.i686"
},
"product_reference": "java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.i686",
"relates_to_product_reference": "7Client-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.ppc64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.5.Z:java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.ppc64"
},
"product_reference": "java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.ppc64",
"relates_to_product_reference": "7Client-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.ppc64le as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.5.Z:java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.ppc64le"
},
"product_reference": "java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.ppc64le",
"relates_to_product_reference": "7Client-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.x86_64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.5.Z:java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.x86_64"
},
"product_reference": "java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.x86_64",
"relates_to_product_reference": "7Client-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-javadoc-1:1.8.0.181-3.b13.el7_5.noarch as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.5.Z:java-1.8.0-openjdk-javadoc-1:1.8.0.181-3.b13.el7_5.noarch"
},
"product_reference": "java-1.8.0-openjdk-javadoc-1:1.8.0.181-3.b13.el7_5.noarch",
"relates_to_product_reference": "7Client-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-javadoc-debug-1:1.8.0.181-3.b13.el7_5.noarch as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.5.Z:java-1.8.0-openjdk-javadoc-debug-1:1.8.0.181-3.b13.el7_5.noarch"
},
"product_reference": "java-1.8.0-openjdk-javadoc-debug-1:1.8.0.181-3.b13.el7_5.noarch",
"relates_to_product_reference": "7Client-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-javadoc-zip-1:1.8.0.181-3.b13.el7_5.noarch as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.5.Z:java-1.8.0-openjdk-javadoc-zip-1:1.8.0.181-3.b13.el7_5.noarch"
},
"product_reference": "java-1.8.0-openjdk-javadoc-zip-1:1.8.0.181-3.b13.el7_5.noarch",
"relates_to_product_reference": "7Client-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-javadoc-zip-debug-1:1.8.0.181-3.b13.el7_5.noarch as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.5.Z:java-1.8.0-openjdk-javadoc-zip-debug-1:1.8.0.181-3.b13.el7_5.noarch"
},
"product_reference": "java-1.8.0-openjdk-javadoc-zip-debug-1:1.8.0.181-3.b13.el7_5.noarch",
"relates_to_product_reference": "7Client-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.aarch64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.5.Z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.aarch64"
},
"product_reference": "java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.aarch64",
"relates_to_product_reference": "7Client-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.i686 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.5.Z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.i686"
},
"product_reference": "java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.i686",
"relates_to_product_reference": "7Client-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.ppc64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.5.Z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.ppc64"
},
"product_reference": "java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.ppc64",
"relates_to_product_reference": "7Client-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.ppc64le as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.5.Z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.ppc64le"
},
"product_reference": "java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.ppc64le",
"relates_to_product_reference": "7Client-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.s390x as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.5.Z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.s390x"
},
"product_reference": "java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.s390x",
"relates_to_product_reference": "7Client-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.x86_64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.5.Z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.x86_64"
},
"product_reference": "java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.x86_64",
"relates_to_product_reference": "7Client-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.aarch64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.5.Z:java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.aarch64"
},
"product_reference": "java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.aarch64",
"relates_to_product_reference": "7Client-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.i686 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.5.Z:java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.i686"
},
"product_reference": "java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.i686",
"relates_to_product_reference": "7Client-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.ppc64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.5.Z:java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.ppc64"
},
"product_reference": "java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.ppc64",
"relates_to_product_reference": "7Client-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.ppc64le as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.5.Z:java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.ppc64le"
},
"product_reference": "java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.ppc64le",
"relates_to_product_reference": "7Client-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.x86_64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.5.Z:java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.x86_64"
},
"product_reference": "java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.x86_64",
"relates_to_product_reference": "7Client-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.aarch64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.aarch64"
},
"product_reference": "java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.aarch64",
"relates_to_product_reference": "7ComputeNode-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.i686 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.i686"
},
"product_reference": "java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.i686",
"relates_to_product_reference": "7ComputeNode-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.ppc64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.ppc64"
},
"product_reference": "java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.ppc64",
"relates_to_product_reference": "7ComputeNode-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.ppc64le as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.ppc64le"
},
"product_reference": "java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.ppc64le",
"relates_to_product_reference": "7ComputeNode-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.s390x as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.s390x"
},
"product_reference": "java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.s390x",
"relates_to_product_reference": "7ComputeNode-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.src as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.src"
},
"product_reference": "java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.src",
"relates_to_product_reference": "7ComputeNode-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.x86_64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.x86_64"
},
"product_reference": "java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.x86_64",
"relates_to_product_reference": "7ComputeNode-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.aarch64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.5.Z:java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.aarch64"
},
"product_reference": "java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.aarch64",
"relates_to_product_reference": "7ComputeNode-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.i686 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.5.Z:java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.i686"
},
"product_reference": "java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.i686",
"relates_to_product_reference": "7ComputeNode-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.ppc64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.5.Z:java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.ppc64"
},
"product_reference": "java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.ppc64",
"relates_to_product_reference": "7ComputeNode-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.ppc64le as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.5.Z:java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.ppc64le"
},
"product_reference": "java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.ppc64le",
"relates_to_product_reference": "7ComputeNode-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.s390x as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.5.Z:java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.s390x"
},
"product_reference": "java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.s390x",
"relates_to_product_reference": "7ComputeNode-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.x86_64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.5.Z:java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.x86_64"
},
"product_reference": "java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.x86_64",
"relates_to_product_reference": "7ComputeNode-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.aarch64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.5.Z:java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.aarch64"
},
"product_reference": "java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.aarch64",
"relates_to_product_reference": "7ComputeNode-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.i686 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.5.Z:java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.i686"
},
"product_reference": "java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.i686",
"relates_to_product_reference": "7ComputeNode-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.ppc64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.5.Z:java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.ppc64"
},
"product_reference": "java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.ppc64",
"relates_to_product_reference": "7ComputeNode-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.ppc64le as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.5.Z:java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.ppc64le"
},
"product_reference": "java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.ppc64le",
"relates_to_product_reference": "7ComputeNode-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.x86_64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.5.Z:java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.x86_64"
},
"product_reference": "java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.x86_64",
"relates_to_product_reference": "7ComputeNode-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.aarch64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.5.Z:java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.aarch64"
},
"product_reference": "java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.aarch64",
"relates_to_product_reference": "7ComputeNode-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.i686 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.5.Z:java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.i686"
},
"product_reference": "java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.i686",
"relates_to_product_reference": "7ComputeNode-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.ppc64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.5.Z:java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.ppc64"
},
"product_reference": "java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.ppc64",
"relates_to_product_reference": "7ComputeNode-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.ppc64le as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.5.Z:java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.ppc64le"
},
"product_reference": "java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.ppc64le",
"relates_to_product_reference": "7ComputeNode-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.x86_64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.5.Z:java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.x86_64"
},
"product_reference": "java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.x86_64",
"relates_to_product_reference": "7ComputeNode-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.aarch64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.5.Z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.aarch64"
},
"product_reference": "java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.aarch64",
"relates_to_product_reference": "7ComputeNode-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.i686 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.5.Z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.i686"
},
"product_reference": "java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.i686",
"relates_to_product_reference": "7ComputeNode-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.ppc64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.5.Z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.ppc64"
},
"product_reference": "java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.ppc64",
"relates_to_product_reference": "7ComputeNode-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.ppc64le as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.5.Z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.ppc64le"
},
"product_reference": "java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.ppc64le",
"relates_to_product_reference": "7ComputeNode-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.s390x as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.5.Z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.s390x"
},
"product_reference": "java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.s390x",
"relates_to_product_reference": "7ComputeNode-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.x86_64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.5.Z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.x86_64"
},
"product_reference": "java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.x86_64",
"relates_to_product_reference": "7ComputeNode-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.aarch64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.5.Z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.aarch64"
},
"product_reference": "java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.aarch64",
"relates_to_product_reference": "7ComputeNode-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.i686 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.5.Z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.i686"
},
"product_reference": "java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.i686",
"relates_to_product_reference": "7ComputeNode-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.ppc64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.5.Z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.ppc64"
},
"product_reference": "java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.ppc64",
"relates_to_product_reference": "7ComputeNode-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.ppc64le as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.5.Z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.ppc64le"
},
"product_reference": "java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.ppc64le",
"relates_to_product_reference": "7ComputeNode-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.s390x as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.5.Z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.s390x"
},
"product_reference": "java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.s390x",
"relates_to_product_reference": "7ComputeNode-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.x86_64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.5.Z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.x86_64"
},
"product_reference": "java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.x86_64",
"relates_to_product_reference": "7ComputeNode-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.aarch64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.5.Z:java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.aarch64"
},
"product_reference": "java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.aarch64",
"relates_to_product_reference": "7ComputeNode-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.i686 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.5.Z:java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.i686"
},
"product_reference": "java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.i686",
"relates_to_product_reference": "7ComputeNode-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.ppc64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.5.Z:java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.ppc64"
},
"product_reference": "java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.ppc64",
"relates_to_product_reference": "7ComputeNode-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.ppc64le as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.5.Z:java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.ppc64le"
},
"product_reference": "java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.ppc64le",
"relates_to_product_reference": "7ComputeNode-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.x86_64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.5.Z:java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.x86_64"
},
"product_reference": "java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.x86_64",
"relates_to_product_reference": "7ComputeNode-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.aarch64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.5.Z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.aarch64"
},
"product_reference": "java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.aarch64",
"relates_to_product_reference": "7ComputeNode-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.i686 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.5.Z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.i686"
},
"product_reference": "java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.i686",
"relates_to_product_reference": "7ComputeNode-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.ppc64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.5.Z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.ppc64"
},
"product_reference": "java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.ppc64",
"relates_to_product_reference": "7ComputeNode-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.ppc64le as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.5.Z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.ppc64le"
},
"product_reference": "java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.ppc64le",
"relates_to_product_reference": "7ComputeNode-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.s390x as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.5.Z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.s390x"
},
"product_reference": "java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.s390x",
"relates_to_product_reference": "7ComputeNode-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.x86_64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.5.Z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.x86_64"
},
"product_reference": "java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.x86_64",
"relates_to_product_reference": "7ComputeNode-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.aarch64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.5.Z:java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.aarch64"
},
"product_reference": "java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.aarch64",
"relates_to_product_reference": "7ComputeNode-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.i686 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.5.Z:java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.i686"
},
"product_reference": "java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.i686",
"relates_to_product_reference": "7ComputeNode-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.ppc64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.5.Z:java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.ppc64"
},
"product_reference": "java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.ppc64",
"relates_to_product_reference": "7ComputeNode-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.ppc64le as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.5.Z:java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.ppc64le"
},
"product_reference": "java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.ppc64le",
"relates_to_product_reference": "7ComputeNode-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.x86_64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.5.Z:java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.x86_64"
},
"product_reference": "java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.x86_64",
"relates_to_product_reference": "7ComputeNode-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.aarch64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.5.Z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.aarch64"
},
"product_reference": "java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.aarch64",
"relates_to_product_reference": "7ComputeNode-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.i686 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.5.Z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.i686"
},
"product_reference": "java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.i686",
"relates_to_product_reference": "7ComputeNode-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.ppc64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.5.Z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.ppc64"
},
"product_reference": "java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.ppc64",
"relates_to_product_reference": "7ComputeNode-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.ppc64le as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.5.Z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.ppc64le"
},
"product_reference": "java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.ppc64le",
"relates_to_product_reference": "7ComputeNode-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.s390x as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.5.Z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.s390x"
},
"product_reference": "java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.s390x",
"relates_to_product_reference": "7ComputeNode-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.x86_64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.5.Z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.x86_64"
},
"product_reference": "java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.x86_64",
"relates_to_product_reference": "7ComputeNode-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.aarch64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.5.Z:java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.aarch64"
},
"product_reference": "java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.aarch64",
"relates_to_product_reference": "7ComputeNode-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.i686 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.5.Z:java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.i686"
},
"product_reference": "java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.i686",
"relates_to_product_reference": "7ComputeNode-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.ppc64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.5.Z:java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.ppc64"
},
"product_reference": "java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.ppc64",
"relates_to_product_reference": "7ComputeNode-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.ppc64le as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.5.Z:java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.ppc64le"
},
"product_reference": "java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.ppc64le",
"relates_to_product_reference": "7ComputeNode-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.x86_64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.5.Z:java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.x86_64"
},
"product_reference": "java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.x86_64",
"relates_to_product_reference": "7ComputeNode-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-javadoc-1:1.8.0.181-3.b13.el7_5.noarch as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.5.Z:java-1.8.0-openjdk-javadoc-1:1.8.0.181-3.b13.el7_5.noarch"
},
"product_reference": "java-1.8.0-openjdk-javadoc-1:1.8.0.181-3.b13.el7_5.noarch",
"relates_to_product_reference": "7ComputeNode-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-javadoc-debug-1:1.8.0.181-3.b13.el7_5.noarch as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.5.Z:java-1.8.0-openjdk-javadoc-debug-1:1.8.0.181-3.b13.el7_5.noarch"
},
"product_reference": "java-1.8.0-openjdk-javadoc-debug-1:1.8.0.181-3.b13.el7_5.noarch",
"relates_to_product_reference": "7ComputeNode-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-javadoc-zip-1:1.8.0.181-3.b13.el7_5.noarch as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.5.Z:java-1.8.0-openjdk-javadoc-zip-1:1.8.0.181-3.b13.el7_5.noarch"
},
"product_reference": "java-1.8.0-openjdk-javadoc-zip-1:1.8.0.181-3.b13.el7_5.noarch",
"relates_to_product_reference": "7ComputeNode-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-javadoc-zip-debug-1:1.8.0.181-3.b13.el7_5.noarch as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.5.Z:java-1.8.0-openjdk-javadoc-zip-debug-1:1.8.0.181-3.b13.el7_5.noarch"
},
"product_reference": "java-1.8.0-openjdk-javadoc-zip-debug-1:1.8.0.181-3.b13.el7_5.noarch",
"relates_to_product_reference": "7ComputeNode-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.aarch64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.5.Z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.aarch64"
},
"product_reference": "java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.aarch64",
"relates_to_product_reference": "7ComputeNode-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.i686 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.5.Z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.i686"
},
"product_reference": "java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.i686",
"relates_to_product_reference": "7ComputeNode-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.ppc64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.5.Z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.ppc64"
},
"product_reference": "java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.ppc64",
"relates_to_product_reference": "7ComputeNode-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.ppc64le as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.5.Z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.ppc64le"
},
"product_reference": "java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.ppc64le",
"relates_to_product_reference": "7ComputeNode-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.s390x as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.5.Z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.s390x"
},
"product_reference": "java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.s390x",
"relates_to_product_reference": "7ComputeNode-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.x86_64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.5.Z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.x86_64"
},
"product_reference": "java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.x86_64",
"relates_to_product_reference": "7ComputeNode-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.aarch64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.5.Z:java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.aarch64"
},
"product_reference": "java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.aarch64",
"relates_to_product_reference": "7ComputeNode-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.i686 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.5.Z:java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.i686"
},
"product_reference": "java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.i686",
"relates_to_product_reference": "7ComputeNode-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.ppc64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.5.Z:java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.ppc64"
},
"product_reference": "java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.ppc64",
"relates_to_product_reference": "7ComputeNode-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.ppc64le as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.5.Z:java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.ppc64le"
},
"product_reference": "java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.ppc64le",
"relates_to_product_reference": "7ComputeNode-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.x86_64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.5.Z:java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.x86_64"
},
"product_reference": "java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.x86_64",
"relates_to_product_reference": "7ComputeNode-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.aarch64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.aarch64"
},
"product_reference": "java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.aarch64",
"relates_to_product_reference": "7ComputeNode-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.i686 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.i686"
},
"product_reference": "java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.i686",
"relates_to_product_reference": "7ComputeNode-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.ppc64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.ppc64"
},
"product_reference": "java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.ppc64",
"relates_to_product_reference": "7ComputeNode-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.ppc64le as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.ppc64le"
},
"product_reference": "java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.ppc64le",
"relates_to_product_reference": "7ComputeNode-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.s390x as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.s390x"
},
"product_reference": "java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.s390x",
"relates_to_product_reference": "7ComputeNode-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.src as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.src"
},
"product_reference": "java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.src",
"relates_to_product_reference": "7ComputeNode-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.x86_64"
},
"product_reference": "java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.x86_64",
"relates_to_product_reference": "7ComputeNode-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.aarch64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.aarch64"
},
"product_reference": "java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.aarch64",
"relates_to_product_reference": "7ComputeNode-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.i686 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.i686"
},
"product_reference": "java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.i686",
"relates_to_product_reference": "7ComputeNode-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.ppc64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.ppc64"
},
"product_reference": "java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.ppc64",
"relates_to_product_reference": "7ComputeNode-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.ppc64le as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.ppc64le"
},
"product_reference": "java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.ppc64le",
"relates_to_product_reference": "7ComputeNode-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.s390x as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.s390x"
},
"product_reference": "java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.s390x",
"relates_to_product_reference": "7ComputeNode-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.x86_64"
},
"product_reference": "java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.x86_64",
"relates_to_product_reference": "7ComputeNode-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.aarch64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.aarch64"
},
"product_reference": "java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.aarch64",
"relates_to_product_reference": "7ComputeNode-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.i686 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.i686"
},
"product_reference": "java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.i686",
"relates_to_product_reference": "7ComputeNode-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.ppc64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.ppc64"
},
"product_reference": "java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.ppc64",
"relates_to_product_reference": "7ComputeNode-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.ppc64le as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.ppc64le"
},
"product_reference": "java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.ppc64le",
"relates_to_product_reference": "7ComputeNode-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.x86_64"
},
"product_reference": "java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.x86_64",
"relates_to_product_reference": "7ComputeNode-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.aarch64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.aarch64"
},
"product_reference": "java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.aarch64",
"relates_to_product_reference": "7ComputeNode-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.i686 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.i686"
},
"product_reference": "java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.i686",
"relates_to_product_reference": "7ComputeNode-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.ppc64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.ppc64"
},
"product_reference": "java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.ppc64",
"relates_to_product_reference": "7ComputeNode-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.ppc64le as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.ppc64le"
},
"product_reference": "java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.ppc64le",
"relates_to_product_reference": "7ComputeNode-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.x86_64"
},
"product_reference": "java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.x86_64",
"relates_to_product_reference": "7ComputeNode-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.aarch64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.aarch64"
},
"product_reference": "java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.aarch64",
"relates_to_product_reference": "7ComputeNode-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.i686 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.i686"
},
"product_reference": "java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.i686",
"relates_to_product_reference": "7ComputeNode-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.ppc64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.ppc64"
},
"product_reference": "java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.ppc64",
"relates_to_product_reference": "7ComputeNode-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.ppc64le as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.ppc64le"
},
"product_reference": "java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.ppc64le",
"relates_to_product_reference": "7ComputeNode-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.s390x as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.s390x"
},
"product_reference": "java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.s390x",
"relates_to_product_reference": "7ComputeNode-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.x86_64"
},
"product_reference": "java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.x86_64",
"relates_to_product_reference": "7ComputeNode-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.aarch64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.aarch64"
},
"product_reference": "java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.aarch64",
"relates_to_product_reference": "7ComputeNode-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.i686 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.i686"
},
"product_reference": "java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.i686",
"relates_to_product_reference": "7ComputeNode-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.ppc64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.ppc64"
},
"product_reference": "java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.ppc64",
"relates_to_product_reference": "7ComputeNode-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.ppc64le as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.ppc64le"
},
"product_reference": "java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.ppc64le",
"relates_to_product_reference": "7ComputeNode-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.s390x as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.s390x"
},
"product_reference": "java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.s390x",
"relates_to_product_reference": "7ComputeNode-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.x86_64"
},
"product_reference": "java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.x86_64",
"relates_to_product_reference": "7ComputeNode-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.aarch64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.aarch64"
},
"product_reference": "java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.aarch64",
"relates_to_product_reference": "7ComputeNode-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.i686 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.i686"
},
"product_reference": "java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.i686",
"relates_to_product_reference": "7ComputeNode-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.ppc64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.ppc64"
},
"product_reference": "java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.ppc64",
"relates_to_product_reference": "7ComputeNode-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.ppc64le as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.ppc64le"
},
"product_reference": "java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.ppc64le",
"relates_to_product_reference": "7ComputeNode-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.x86_64"
},
"product_reference": "java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.x86_64",
"relates_to_product_reference": "7ComputeNode-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.aarch64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.aarch64"
},
"product_reference": "java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.aarch64",
"relates_to_product_reference": "7ComputeNode-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.i686 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.i686"
},
"product_reference": "java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.i686",
"relates_to_product_reference": "7ComputeNode-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.ppc64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.ppc64"
},
"product_reference": "java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.ppc64",
"relates_to_product_reference": "7ComputeNode-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.ppc64le as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.ppc64le"
},
"product_reference": "java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.ppc64le",
"relates_to_product_reference": "7ComputeNode-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.s390x as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.s390x"
},
"product_reference": "java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.s390x",
"relates_to_product_reference": "7ComputeNode-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.x86_64"
},
"product_reference": "java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.x86_64",
"relates_to_product_reference": "7ComputeNode-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.aarch64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.aarch64"
},
"product_reference": "java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.aarch64",
"relates_to_product_reference": "7ComputeNode-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.i686 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.i686"
},
"product_reference": "java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.i686",
"relates_to_product_reference": "7ComputeNode-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.ppc64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.ppc64"
},
"product_reference": "java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.ppc64",
"relates_to_product_reference": "7ComputeNode-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.ppc64le as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.ppc64le"
},
"product_reference": "java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.ppc64le",
"relates_to_product_reference": "7ComputeNode-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.x86_64"
},
"product_reference": "java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.x86_64",
"relates_to_product_reference": "7ComputeNode-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.aarch64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.aarch64"
},
"product_reference": "java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.aarch64",
"relates_to_product_reference": "7ComputeNode-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.i686 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.i686"
},
"product_reference": "java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.i686",
"relates_to_product_reference": "7ComputeNode-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.ppc64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.ppc64"
},
"product_reference": "java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.ppc64",
"relates_to_product_reference": "7ComputeNode-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.ppc64le as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.ppc64le"
},
"product_reference": "java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.ppc64le",
"relates_to_product_reference": "7ComputeNode-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.s390x as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.s390x"
},
"product_reference": "java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.s390x",
"relates_to_product_reference": "7ComputeNode-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.x86_64"
},
"product_reference": "java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.x86_64",
"relates_to_product_reference": "7ComputeNode-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.aarch64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.aarch64"
},
"product_reference": "java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.aarch64",
"relates_to_product_reference": "7ComputeNode-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.i686 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.i686"
},
"product_reference": "java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.i686",
"relates_to_product_reference": "7ComputeNode-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.ppc64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.ppc64"
},
"product_reference": "java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.ppc64",
"relates_to_product_reference": "7ComputeNode-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.ppc64le as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.ppc64le"
},
"product_reference": "java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.ppc64le",
"relates_to_product_reference": "7ComputeNode-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.x86_64"
},
"product_reference": "java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.x86_64",
"relates_to_product_reference": "7ComputeNode-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-javadoc-1:1.8.0.181-3.b13.el7_5.noarch as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-javadoc-1:1.8.0.181-3.b13.el7_5.noarch"
},
"product_reference": "java-1.8.0-openjdk-javadoc-1:1.8.0.181-3.b13.el7_5.noarch",
"relates_to_product_reference": "7ComputeNode-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-javadoc-debug-1:1.8.0.181-3.b13.el7_5.noarch as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-javadoc-debug-1:1.8.0.181-3.b13.el7_5.noarch"
},
"product_reference": "java-1.8.0-openjdk-javadoc-debug-1:1.8.0.181-3.b13.el7_5.noarch",
"relates_to_product_reference": "7ComputeNode-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-javadoc-zip-1:1.8.0.181-3.b13.el7_5.noarch as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-javadoc-zip-1:1.8.0.181-3.b13.el7_5.noarch"
},
"product_reference": "java-1.8.0-openjdk-javadoc-zip-1:1.8.0.181-3.b13.el7_5.noarch",
"relates_to_product_reference": "7ComputeNode-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-javadoc-zip-debug-1:1.8.0.181-3.b13.el7_5.noarch as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-javadoc-zip-debug-1:1.8.0.181-3.b13.el7_5.noarch"
},
"product_reference": "java-1.8.0-openjdk-javadoc-zip-debug-1:1.8.0.181-3.b13.el7_5.noarch",
"relates_to_product_reference": "7ComputeNode-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.aarch64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.aarch64"
},
"product_reference": "java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.aarch64",
"relates_to_product_reference": "7ComputeNode-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.i686 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.i686"
},
"product_reference": "java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.i686",
"relates_to_product_reference": "7ComputeNode-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.ppc64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.ppc64"
},
"product_reference": "java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.ppc64",
"relates_to_product_reference": "7ComputeNode-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.ppc64le as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.ppc64le"
},
"product_reference": "java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.ppc64le",
"relates_to_product_reference": "7ComputeNode-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.s390x as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.s390x"
},
"product_reference": "java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.s390x",
"relates_to_product_reference": "7ComputeNode-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.x86_64"
},
"product_reference": "java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.x86_64",
"relates_to_product_reference": "7ComputeNode-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.aarch64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.aarch64"
},
"product_reference": "java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.aarch64",
"relates_to_product_reference": "7ComputeNode-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.i686 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.i686"
},
"product_reference": "java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.i686",
"relates_to_product_reference": "7ComputeNode-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.ppc64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.ppc64"
},
"product_reference": "java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.ppc64",
"relates_to_product_reference": "7ComputeNode-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.ppc64le as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.ppc64le"
},
"product_reference": "java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.ppc64le",
"relates_to_product_reference": "7ComputeNode-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.x86_64"
},
"product_reference": "java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.x86_64",
"relates_to_product_reference": "7ComputeNode-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.aarch64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.aarch64"
},
"product_reference": "java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.aarch64",
"relates_to_product_reference": "7Server-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.i686 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.i686"
},
"product_reference": "java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.i686",
"relates_to_product_reference": "7Server-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.ppc64"
},
"product_reference": "java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.ppc64",
"relates_to_product_reference": "7Server-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.ppc64le"
},
"product_reference": "java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.ppc64le",
"relates_to_product_reference": "7Server-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.s390x as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.s390x"
},
"product_reference": "java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.s390x",
"relates_to_product_reference": "7Server-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.src as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.src"
},
"product_reference": "java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.src",
"relates_to_product_reference": "7Server-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.x86_64"
},
"product_reference": "java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.x86_64",
"relates_to_product_reference": "7Server-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.aarch64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.5.Z:java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.aarch64"
},
"product_reference": "java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.aarch64",
"relates_to_product_reference": "7Server-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.i686 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.5.Z:java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.i686"
},
"product_reference": "java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.i686",
"relates_to_product_reference": "7Server-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.5.Z:java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.ppc64"
},
"product_reference": "java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.ppc64",
"relates_to_product_reference": "7Server-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.5.Z:java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.ppc64le"
},
"product_reference": "java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.ppc64le",
"relates_to_product_reference": "7Server-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.s390x as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.5.Z:java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.s390x"
},
"product_reference": "java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.s390x",
"relates_to_product_reference": "7Server-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.5.Z:java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.x86_64"
},
"product_reference": "java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.x86_64",
"relates_to_product_reference": "7Server-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.aarch64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.5.Z:java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.aarch64"
},
"product_reference": "java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.aarch64",
"relates_to_product_reference": "7Server-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.i686 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.5.Z:java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.i686"
},
"product_reference": "java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.i686",
"relates_to_product_reference": "7Server-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.5.Z:java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.ppc64"
},
"product_reference": "java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.ppc64",
"relates_to_product_reference": "7Server-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.5.Z:java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.ppc64le"
},
"product_reference": "java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.ppc64le",
"relates_to_product_reference": "7Server-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.5.Z:java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.x86_64"
},
"product_reference": "java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.x86_64",
"relates_to_product_reference": "7Server-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.aarch64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.5.Z:java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.aarch64"
},
"product_reference": "java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.aarch64",
"relates_to_product_reference": "7Server-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.i686 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.5.Z:java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.i686"
},
"product_reference": "java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.i686",
"relates_to_product_reference": "7Server-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.5.Z:java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.ppc64"
},
"product_reference": "java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.ppc64",
"relates_to_product_reference": "7Server-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.5.Z:java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.ppc64le"
},
"product_reference": "java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.ppc64le",
"relates_to_product_reference": "7Server-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.5.Z:java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.x86_64"
},
"product_reference": "java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.x86_64",
"relates_to_product_reference": "7Server-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.aarch64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.5.Z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.aarch64"
},
"product_reference": "java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.aarch64",
"relates_to_product_reference": "7Server-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.i686 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.5.Z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.i686"
},
"product_reference": "java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.i686",
"relates_to_product_reference": "7Server-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.5.Z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.ppc64"
},
"product_reference": "java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.ppc64",
"relates_to_product_reference": "7Server-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.5.Z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.ppc64le"
},
"product_reference": "java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.ppc64le",
"relates_to_product_reference": "7Server-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.s390x as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.5.Z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.s390x"
},
"product_reference": "java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.s390x",
"relates_to_product_reference": "7Server-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.5.Z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.x86_64"
},
"product_reference": "java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.x86_64",
"relates_to_product_reference": "7Server-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.aarch64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.5.Z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.aarch64"
},
"product_reference": "java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.aarch64",
"relates_to_product_reference": "7Server-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.i686 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.5.Z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.i686"
},
"product_reference": "java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.i686",
"relates_to_product_reference": "7Server-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.5.Z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.ppc64"
},
"product_reference": "java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.ppc64",
"relates_to_product_reference": "7Server-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.5.Z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.ppc64le"
},
"product_reference": "java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.ppc64le",
"relates_to_product_reference": "7Server-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.s390x as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.5.Z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.s390x"
},
"product_reference": "java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.s390x",
"relates_to_product_reference": "7Server-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.5.Z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.x86_64"
},
"product_reference": "java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.x86_64",
"relates_to_product_reference": "7Server-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.aarch64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.5.Z:java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.aarch64"
},
"product_reference": "java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.aarch64",
"relates_to_product_reference": "7Server-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.i686 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.5.Z:java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.i686"
},
"product_reference": "java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.i686",
"relates_to_product_reference": "7Server-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.5.Z:java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.ppc64"
},
"product_reference": "java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.ppc64",
"relates_to_product_reference": "7Server-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.5.Z:java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.ppc64le"
},
"product_reference": "java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.ppc64le",
"relates_to_product_reference": "7Server-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.5.Z:java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.x86_64"
},
"product_reference": "java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.x86_64",
"relates_to_product_reference": "7Server-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.aarch64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.5.Z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.aarch64"
},
"product_reference": "java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.aarch64",
"relates_to_product_reference": "7Server-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.i686 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.5.Z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.i686"
},
"product_reference": "java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.i686",
"relates_to_product_reference": "7Server-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.5.Z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.ppc64"
},
"product_reference": "java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.ppc64",
"relates_to_product_reference": "7Server-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.5.Z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.ppc64le"
},
"product_reference": "java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.ppc64le",
"relates_to_product_reference": "7Server-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.s390x as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.5.Z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.s390x"
},
"product_reference": "java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.s390x",
"relates_to_product_reference": "7Server-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.5.Z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.x86_64"
},
"product_reference": "java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.x86_64",
"relates_to_product_reference": "7Server-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.aarch64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.5.Z:java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.aarch64"
},
"product_reference": "java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.aarch64",
"relates_to_product_reference": "7Server-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.i686 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.5.Z:java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.i686"
},
"product_reference": "java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.i686",
"relates_to_product_reference": "7Server-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.5.Z:java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.ppc64"
},
"product_reference": "java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.ppc64",
"relates_to_product_reference": "7Server-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.5.Z:java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.ppc64le"
},
"product_reference": "java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.ppc64le",
"relates_to_product_reference": "7Server-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.5.Z:java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.x86_64"
},
"product_reference": "java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.x86_64",
"relates_to_product_reference": "7Server-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.aarch64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.5.Z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.aarch64"
},
"product_reference": "java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.aarch64",
"relates_to_product_reference": "7Server-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.i686 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.5.Z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.i686"
},
"product_reference": "java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.i686",
"relates_to_product_reference": "7Server-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.5.Z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.ppc64"
},
"product_reference": "java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.ppc64",
"relates_to_product_reference": "7Server-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.5.Z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.ppc64le"
},
"product_reference": "java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.ppc64le",
"relates_to_product_reference": "7Server-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.s390x as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.5.Z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.s390x"
},
"product_reference": "java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.s390x",
"relates_to_product_reference": "7Server-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.5.Z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.x86_64"
},
"product_reference": "java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.x86_64",
"relates_to_product_reference": "7Server-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.aarch64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.5.Z:java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.aarch64"
},
"product_reference": "java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.aarch64",
"relates_to_product_reference": "7Server-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.i686 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.5.Z:java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.i686"
},
"product_reference": "java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.i686",
"relates_to_product_reference": "7Server-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.5.Z:java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.ppc64"
},
"product_reference": "java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.ppc64",
"relates_to_product_reference": "7Server-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.5.Z:java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.ppc64le"
},
"product_reference": "java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.ppc64le",
"relates_to_product_reference": "7Server-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.5.Z:java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.x86_64"
},
"product_reference": "java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.x86_64",
"relates_to_product_reference": "7Server-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-javadoc-1:1.8.0.181-3.b13.el7_5.noarch as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.5.Z:java-1.8.0-openjdk-javadoc-1:1.8.0.181-3.b13.el7_5.noarch"
},
"product_reference": "java-1.8.0-openjdk-javadoc-1:1.8.0.181-3.b13.el7_5.noarch",
"relates_to_product_reference": "7Server-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-javadoc-debug-1:1.8.0.181-3.b13.el7_5.noarch as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.5.Z:java-1.8.0-openjdk-javadoc-debug-1:1.8.0.181-3.b13.el7_5.noarch"
},
"product_reference": "java-1.8.0-openjdk-javadoc-debug-1:1.8.0.181-3.b13.el7_5.noarch",
"relates_to_product_reference": "7Server-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-javadoc-zip-1:1.8.0.181-3.b13.el7_5.noarch as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.5.Z:java-1.8.0-openjdk-javadoc-zip-1:1.8.0.181-3.b13.el7_5.noarch"
},
"product_reference": "java-1.8.0-openjdk-javadoc-zip-1:1.8.0.181-3.b13.el7_5.noarch",
"relates_to_product_reference": "7Server-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-javadoc-zip-debug-1:1.8.0.181-3.b13.el7_5.noarch as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.5.Z:java-1.8.0-openjdk-javadoc-zip-debug-1:1.8.0.181-3.b13.el7_5.noarch"
},
"product_reference": "java-1.8.0-openjdk-javadoc-zip-debug-1:1.8.0.181-3.b13.el7_5.noarch",
"relates_to_product_reference": "7Server-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.aarch64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.5.Z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.aarch64"
},
"product_reference": "java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.aarch64",
"relates_to_product_reference": "7Server-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.i686 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.5.Z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.i686"
},
"product_reference": "java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.i686",
"relates_to_product_reference": "7Server-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.5.Z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.ppc64"
},
"product_reference": "java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.ppc64",
"relates_to_product_reference": "7Server-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.5.Z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.ppc64le"
},
"product_reference": "java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.ppc64le",
"relates_to_product_reference": "7Server-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.s390x as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.5.Z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.s390x"
},
"product_reference": "java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.s390x",
"relates_to_product_reference": "7Server-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.5.Z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.x86_64"
},
"product_reference": "java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.x86_64",
"relates_to_product_reference": "7Server-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.aarch64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.5.Z:java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.aarch64"
},
"product_reference": "java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.aarch64",
"relates_to_product_reference": "7Server-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.i686 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.5.Z:java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.i686"
},
"product_reference": "java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.i686",
"relates_to_product_reference": "7Server-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.5.Z:java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.ppc64"
},
"product_reference": "java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.ppc64",
"relates_to_product_reference": "7Server-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.5.Z:java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.ppc64le"
},
"product_reference": "java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.ppc64le",
"relates_to_product_reference": "7Server-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.5.Z:java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.x86_64"
},
"product_reference": "java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.x86_64",
"relates_to_product_reference": "7Server-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.aarch64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)",
"product_id": "7Server-Alt-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.aarch64"
},
"product_reference": "java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.aarch64",
"relates_to_product_reference": "7Server-Alt-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.i686 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)",
"product_id": "7Server-Alt-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.i686"
},
"product_reference": "java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.i686",
"relates_to_product_reference": "7Server-Alt-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.ppc64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)",
"product_id": "7Server-Alt-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.ppc64"
},
"product_reference": "java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.ppc64",
"relates_to_product_reference": "7Server-Alt-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.ppc64le as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)",
"product_id": "7Server-Alt-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.ppc64le"
},
"product_reference": "java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.ppc64le",
"relates_to_product_reference": "7Server-Alt-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.s390x as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)",
"product_id": "7Server-Alt-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.s390x"
},
"product_reference": "java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.s390x",
"relates_to_product_reference": "7Server-Alt-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.src as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)",
"product_id": "7Server-Alt-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.src"
},
"product_reference": "java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.src",
"relates_to_product_reference": "7Server-Alt-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.x86_64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)",
"product_id": "7Server-Alt-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.x86_64"
},
"product_reference": "java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.x86_64",
"relates_to_product_reference": "7Server-Alt-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.aarch64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)",
"product_id": "7Server-Alt-7.5.Z:java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.aarch64"
},
"product_reference": "java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.aarch64",
"relates_to_product_reference": "7Server-Alt-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.i686 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)",
"product_id": "7Server-Alt-7.5.Z:java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.i686"
},
"product_reference": "java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.i686",
"relates_to_product_reference": "7Server-Alt-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.ppc64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)",
"product_id": "7Server-Alt-7.5.Z:java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.ppc64"
},
"product_reference": "java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.ppc64",
"relates_to_product_reference": "7Server-Alt-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.ppc64le as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)",
"product_id": "7Server-Alt-7.5.Z:java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.ppc64le"
},
"product_reference": "java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.ppc64le",
"relates_to_product_reference": "7Server-Alt-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.s390x as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)",
"product_id": "7Server-Alt-7.5.Z:java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.s390x"
},
"product_reference": "java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.s390x",
"relates_to_product_reference": "7Server-Alt-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.x86_64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)",
"product_id": "7Server-Alt-7.5.Z:java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.x86_64"
},
"product_reference": "java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.x86_64",
"relates_to_product_reference": "7Server-Alt-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.aarch64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)",
"product_id": "7Server-Alt-7.5.Z:java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.aarch64"
},
"product_reference": "java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.aarch64",
"relates_to_product_reference": "7Server-Alt-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.i686 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)",
"product_id": "7Server-Alt-7.5.Z:java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.i686"
},
"product_reference": "java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.i686",
"relates_to_product_reference": "7Server-Alt-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.ppc64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)",
"product_id": "7Server-Alt-7.5.Z:java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.ppc64"
},
"product_reference": "java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.ppc64",
"relates_to_product_reference": "7Server-Alt-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.ppc64le as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)",
"product_id": "7Server-Alt-7.5.Z:java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.ppc64le"
},
"product_reference": "java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.ppc64le",
"relates_to_product_reference": "7Server-Alt-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.x86_64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)",
"product_id": "7Server-Alt-7.5.Z:java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.x86_64"
},
"product_reference": "java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.x86_64",
"relates_to_product_reference": "7Server-Alt-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.aarch64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)",
"product_id": "7Server-Alt-7.5.Z:java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.aarch64"
},
"product_reference": "java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.aarch64",
"relates_to_product_reference": "7Server-Alt-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.i686 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)",
"product_id": "7Server-Alt-7.5.Z:java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.i686"
},
"product_reference": "java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.i686",
"relates_to_product_reference": "7Server-Alt-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.ppc64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)",
"product_id": "7Server-Alt-7.5.Z:java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.ppc64"
},
"product_reference": "java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.ppc64",
"relates_to_product_reference": "7Server-Alt-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.ppc64le as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)",
"product_id": "7Server-Alt-7.5.Z:java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.ppc64le"
},
"product_reference": "java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.ppc64le",
"relates_to_product_reference": "7Server-Alt-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.x86_64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)",
"product_id": "7Server-Alt-7.5.Z:java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.x86_64"
},
"product_reference": "java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.x86_64",
"relates_to_product_reference": "7Server-Alt-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.aarch64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)",
"product_id": "7Server-Alt-7.5.Z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.aarch64"
},
"product_reference": "java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.aarch64",
"relates_to_product_reference": "7Server-Alt-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.i686 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)",
"product_id": "7Server-Alt-7.5.Z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.i686"
},
"product_reference": "java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.i686",
"relates_to_product_reference": "7Server-Alt-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.ppc64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)",
"product_id": "7Server-Alt-7.5.Z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.ppc64"
},
"product_reference": "java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.ppc64",
"relates_to_product_reference": "7Server-Alt-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.ppc64le as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)",
"product_id": "7Server-Alt-7.5.Z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.ppc64le"
},
"product_reference": "java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.ppc64le",
"relates_to_product_reference": "7Server-Alt-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.s390x as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)",
"product_id": "7Server-Alt-7.5.Z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.s390x"
},
"product_reference": "java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.s390x",
"relates_to_product_reference": "7Server-Alt-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.x86_64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)",
"product_id": "7Server-Alt-7.5.Z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.x86_64"
},
"product_reference": "java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.x86_64",
"relates_to_product_reference": "7Server-Alt-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.aarch64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)",
"product_id": "7Server-Alt-7.5.Z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.aarch64"
},
"product_reference": "java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.aarch64",
"relates_to_product_reference": "7Server-Alt-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.i686 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)",
"product_id": "7Server-Alt-7.5.Z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.i686"
},
"product_reference": "java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.i686",
"relates_to_product_reference": "7Server-Alt-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.ppc64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)",
"product_id": "7Server-Alt-7.5.Z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.ppc64"
},
"product_reference": "java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.ppc64",
"relates_to_product_reference": "7Server-Alt-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.ppc64le as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)",
"product_id": "7Server-Alt-7.5.Z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.ppc64le"
},
"product_reference": "java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.ppc64le",
"relates_to_product_reference": "7Server-Alt-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.s390x as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)",
"product_id": "7Server-Alt-7.5.Z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.s390x"
},
"product_reference": "java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.s390x",
"relates_to_product_reference": "7Server-Alt-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.x86_64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)",
"product_id": "7Server-Alt-7.5.Z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.x86_64"
},
"product_reference": "java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.x86_64",
"relates_to_product_reference": "7Server-Alt-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.aarch64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)",
"product_id": "7Server-Alt-7.5.Z:java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.aarch64"
},
"product_reference": "java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.aarch64",
"relates_to_product_reference": "7Server-Alt-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.i686 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)",
"product_id": "7Server-Alt-7.5.Z:java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.i686"
},
"product_reference": "java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.i686",
"relates_to_product_reference": "7Server-Alt-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.ppc64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)",
"product_id": "7Server-Alt-7.5.Z:java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.ppc64"
},
"product_reference": "java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.ppc64",
"relates_to_product_reference": "7Server-Alt-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.ppc64le as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)",
"product_id": "7Server-Alt-7.5.Z:java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.ppc64le"
},
"product_reference": "java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.ppc64le",
"relates_to_product_reference": "7Server-Alt-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.x86_64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)",
"product_id": "7Server-Alt-7.5.Z:java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.x86_64"
},
"product_reference": "java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.x86_64",
"relates_to_product_reference": "7Server-Alt-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.aarch64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)",
"product_id": "7Server-Alt-7.5.Z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.aarch64"
},
"product_reference": "java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.aarch64",
"relates_to_product_reference": "7Server-Alt-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.i686 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)",
"product_id": "7Server-Alt-7.5.Z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.i686"
},
"product_reference": "java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.i686",
"relates_to_product_reference": "7Server-Alt-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.ppc64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)",
"product_id": "7Server-Alt-7.5.Z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.ppc64"
},
"product_reference": "java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.ppc64",
"relates_to_product_reference": "7Server-Alt-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.ppc64le as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)",
"product_id": "7Server-Alt-7.5.Z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.ppc64le"
},
"product_reference": "java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.ppc64le",
"relates_to_product_reference": "7Server-Alt-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.s390x as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)",
"product_id": "7Server-Alt-7.5.Z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.s390x"
},
"product_reference": "java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.s390x",
"relates_to_product_reference": "7Server-Alt-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.x86_64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)",
"product_id": "7Server-Alt-7.5.Z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.x86_64"
},
"product_reference": "java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.x86_64",
"relates_to_product_reference": "7Server-Alt-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.aarch64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)",
"product_id": "7Server-Alt-7.5.Z:java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.aarch64"
},
"product_reference": "java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.aarch64",
"relates_to_product_reference": "7Server-Alt-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.i686 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)",
"product_id": "7Server-Alt-7.5.Z:java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.i686"
},
"product_reference": "java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.i686",
"relates_to_product_reference": "7Server-Alt-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.ppc64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)",
"product_id": "7Server-Alt-7.5.Z:java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.ppc64"
},
"product_reference": "java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.ppc64",
"relates_to_product_reference": "7Server-Alt-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.ppc64le as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)",
"product_id": "7Server-Alt-7.5.Z:java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.ppc64le"
},
"product_reference": "java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.ppc64le",
"relates_to_product_reference": "7Server-Alt-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.x86_64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)",
"product_id": "7Server-Alt-7.5.Z:java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.x86_64"
},
"product_reference": "java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.x86_64",
"relates_to_product_reference": "7Server-Alt-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.aarch64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)",
"product_id": "7Server-Alt-7.5.Z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.aarch64"
},
"product_reference": "java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.aarch64",
"relates_to_product_reference": "7Server-Alt-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.i686 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)",
"product_id": "7Server-Alt-7.5.Z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.i686"
},
"product_reference": "java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.i686",
"relates_to_product_reference": "7Server-Alt-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.ppc64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)",
"product_id": "7Server-Alt-7.5.Z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.ppc64"
},
"product_reference": "java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.ppc64",
"relates_to_product_reference": "7Server-Alt-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.ppc64le as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)",
"product_id": "7Server-Alt-7.5.Z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.ppc64le"
},
"product_reference": "java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.ppc64le",
"relates_to_product_reference": "7Server-Alt-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.s390x as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)",
"product_id": "7Server-Alt-7.5.Z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.s390x"
},
"product_reference": "java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.s390x",
"relates_to_product_reference": "7Server-Alt-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.x86_64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)",
"product_id": "7Server-Alt-7.5.Z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.x86_64"
},
"product_reference": "java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.x86_64",
"relates_to_product_reference": "7Server-Alt-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.aarch64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)",
"product_id": "7Server-Alt-7.5.Z:java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.aarch64"
},
"product_reference": "java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.aarch64",
"relates_to_product_reference": "7Server-Alt-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.i686 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)",
"product_id": "7Server-Alt-7.5.Z:java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.i686"
},
"product_reference": "java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.i686",
"relates_to_product_reference": "7Server-Alt-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.ppc64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)",
"product_id": "7Server-Alt-7.5.Z:java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.ppc64"
},
"product_reference": "java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.ppc64",
"relates_to_product_reference": "7Server-Alt-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.ppc64le as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)",
"product_id": "7Server-Alt-7.5.Z:java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.ppc64le"
},
"product_reference": "java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.ppc64le",
"relates_to_product_reference": "7Server-Alt-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.x86_64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)",
"product_id": "7Server-Alt-7.5.Z:java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.x86_64"
},
"product_reference": "java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.x86_64",
"relates_to_product_reference": "7Server-Alt-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-javadoc-1:1.8.0.181-3.b13.el7_5.noarch as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)",
"product_id": "7Server-Alt-7.5.Z:java-1.8.0-openjdk-javadoc-1:1.8.0.181-3.b13.el7_5.noarch"
},
"product_reference": "java-1.8.0-openjdk-javadoc-1:1.8.0.181-3.b13.el7_5.noarch",
"relates_to_product_reference": "7Server-Alt-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-javadoc-debug-1:1.8.0.181-3.b13.el7_5.noarch as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)",
"product_id": "7Server-Alt-7.5.Z:java-1.8.0-openjdk-javadoc-debug-1:1.8.0.181-3.b13.el7_5.noarch"
},
"product_reference": "java-1.8.0-openjdk-javadoc-debug-1:1.8.0.181-3.b13.el7_5.noarch",
"relates_to_product_reference": "7Server-Alt-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-javadoc-zip-1:1.8.0.181-3.b13.el7_5.noarch as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)",
"product_id": "7Server-Alt-7.5.Z:java-1.8.0-openjdk-javadoc-zip-1:1.8.0.181-3.b13.el7_5.noarch"
},
"product_reference": "java-1.8.0-openjdk-javadoc-zip-1:1.8.0.181-3.b13.el7_5.noarch",
"relates_to_product_reference": "7Server-Alt-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-javadoc-zip-debug-1:1.8.0.181-3.b13.el7_5.noarch as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)",
"product_id": "7Server-Alt-7.5.Z:java-1.8.0-openjdk-javadoc-zip-debug-1:1.8.0.181-3.b13.el7_5.noarch"
},
"product_reference": "java-1.8.0-openjdk-javadoc-zip-debug-1:1.8.0.181-3.b13.el7_5.noarch",
"relates_to_product_reference": "7Server-Alt-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.aarch64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)",
"product_id": "7Server-Alt-7.5.Z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.aarch64"
},
"product_reference": "java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.aarch64",
"relates_to_product_reference": "7Server-Alt-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.i686 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)",
"product_id": "7Server-Alt-7.5.Z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.i686"
},
"product_reference": "java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.i686",
"relates_to_product_reference": "7Server-Alt-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.ppc64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)",
"product_id": "7Server-Alt-7.5.Z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.ppc64"
},
"product_reference": "java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.ppc64",
"relates_to_product_reference": "7Server-Alt-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.ppc64le as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)",
"product_id": "7Server-Alt-7.5.Z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.ppc64le"
},
"product_reference": "java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.ppc64le",
"relates_to_product_reference": "7Server-Alt-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.s390x as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)",
"product_id": "7Server-Alt-7.5.Z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.s390x"
},
"product_reference": "java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.s390x",
"relates_to_product_reference": "7Server-Alt-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.x86_64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)",
"product_id": "7Server-Alt-7.5.Z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.x86_64"
},
"product_reference": "java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.x86_64",
"relates_to_product_reference": "7Server-Alt-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.aarch64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)",
"product_id": "7Server-Alt-7.5.Z:java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.aarch64"
},
"product_reference": "java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.aarch64",
"relates_to_product_reference": "7Server-Alt-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.i686 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)",
"product_id": "7Server-Alt-7.5.Z:java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.i686"
},
"product_reference": "java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.i686",
"relates_to_product_reference": "7Server-Alt-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.ppc64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)",
"product_id": "7Server-Alt-7.5.Z:java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.ppc64"
},
"product_reference": "java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.ppc64",
"relates_to_product_reference": "7Server-Alt-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.ppc64le as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)",
"product_id": "7Server-Alt-7.5.Z:java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.ppc64le"
},
"product_reference": "java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.ppc64le",
"relates_to_product_reference": "7Server-Alt-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.x86_64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)",
"product_id": "7Server-Alt-7.5.Z:java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.x86_64"
},
"product_reference": "java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.x86_64",
"relates_to_product_reference": "7Server-Alt-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.aarch64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.aarch64"
},
"product_reference": "java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.aarch64",
"relates_to_product_reference": "7Server-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.i686"
},
"product_reference": "java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.i686",
"relates_to_product_reference": "7Server-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.ppc64"
},
"product_reference": "java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.ppc64",
"relates_to_product_reference": "7Server-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.ppc64le as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.ppc64le"
},
"product_reference": "java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.ppc64le",
"relates_to_product_reference": "7Server-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.s390x"
},
"product_reference": "java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.s390x",
"relates_to_product_reference": "7Server-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.src as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.src"
},
"product_reference": "java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.src",
"relates_to_product_reference": "7Server-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.x86_64"
},
"product_reference": "java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.x86_64",
"relates_to_product_reference": "7Server-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.aarch64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.5.Z:java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.aarch64"
},
"product_reference": "java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.aarch64",
"relates_to_product_reference": "7Server-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.5.Z:java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.i686"
},
"product_reference": "java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.i686",
"relates_to_product_reference": "7Server-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.5.Z:java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.ppc64"
},
"product_reference": "java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.ppc64",
"relates_to_product_reference": "7Server-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.ppc64le as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.5.Z:java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.ppc64le"
},
"product_reference": "java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.ppc64le",
"relates_to_product_reference": "7Server-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.5.Z:java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.s390x"
},
"product_reference": "java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.s390x",
"relates_to_product_reference": "7Server-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.5.Z:java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.x86_64"
},
"product_reference": "java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.x86_64",
"relates_to_product_reference": "7Server-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.aarch64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.5.Z:java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.aarch64"
},
"product_reference": "java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.aarch64",
"relates_to_product_reference": "7Server-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.5.Z:java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.i686"
},
"product_reference": "java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.i686",
"relates_to_product_reference": "7Server-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.5.Z:java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.ppc64"
},
"product_reference": "java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.ppc64",
"relates_to_product_reference": "7Server-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.ppc64le as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.5.Z:java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.ppc64le"
},
"product_reference": "java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.ppc64le",
"relates_to_product_reference": "7Server-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.5.Z:java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.x86_64"
},
"product_reference": "java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.x86_64",
"relates_to_product_reference": "7Server-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.aarch64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.5.Z:java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.aarch64"
},
"product_reference": "java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.aarch64",
"relates_to_product_reference": "7Server-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.5.Z:java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.i686"
},
"product_reference": "java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.i686",
"relates_to_product_reference": "7Server-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.5.Z:java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.ppc64"
},
"product_reference": "java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.ppc64",
"relates_to_product_reference": "7Server-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.ppc64le as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.5.Z:java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.ppc64le"
},
"product_reference": "java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.ppc64le",
"relates_to_product_reference": "7Server-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.5.Z:java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.x86_64"
},
"product_reference": "java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.x86_64",
"relates_to_product_reference": "7Server-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.aarch64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.5.Z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.aarch64"
},
"product_reference": "java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.aarch64",
"relates_to_product_reference": "7Server-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.5.Z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.i686"
},
"product_reference": "java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.i686",
"relates_to_product_reference": "7Server-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.5.Z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.ppc64"
},
"product_reference": "java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.ppc64",
"relates_to_product_reference": "7Server-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.ppc64le as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.5.Z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.ppc64le"
},
"product_reference": "java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.ppc64le",
"relates_to_product_reference": "7Server-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.5.Z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.s390x"
},
"product_reference": "java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.s390x",
"relates_to_product_reference": "7Server-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.5.Z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.x86_64"
},
"product_reference": "java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.x86_64",
"relates_to_product_reference": "7Server-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.aarch64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.5.Z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.aarch64"
},
"product_reference": "java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.aarch64",
"relates_to_product_reference": "7Server-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.5.Z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.i686"
},
"product_reference": "java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.i686",
"relates_to_product_reference": "7Server-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.5.Z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.ppc64"
},
"product_reference": "java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.ppc64",
"relates_to_product_reference": "7Server-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.ppc64le as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.5.Z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.ppc64le"
},
"product_reference": "java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.ppc64le",
"relates_to_product_reference": "7Server-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.5.Z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.s390x"
},
"product_reference": "java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.s390x",
"relates_to_product_reference": "7Server-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.5.Z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.x86_64"
},
"product_reference": "java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.x86_64",
"relates_to_product_reference": "7Server-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.aarch64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.5.Z:java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.aarch64"
},
"product_reference": "java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.aarch64",
"relates_to_product_reference": "7Server-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.5.Z:java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.i686"
},
"product_reference": "java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.i686",
"relates_to_product_reference": "7Server-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.5.Z:java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.ppc64"
},
"product_reference": "java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.ppc64",
"relates_to_product_reference": "7Server-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.ppc64le as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.5.Z:java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.ppc64le"
},
"product_reference": "java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.ppc64le",
"relates_to_product_reference": "7Server-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.5.Z:java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.x86_64"
},
"product_reference": "java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.x86_64",
"relates_to_product_reference": "7Server-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.aarch64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.5.Z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.aarch64"
},
"product_reference": "java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.aarch64",
"relates_to_product_reference": "7Server-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.5.Z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.i686"
},
"product_reference": "java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.i686",
"relates_to_product_reference": "7Server-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.5.Z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.ppc64"
},
"product_reference": "java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.ppc64",
"relates_to_product_reference": "7Server-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.ppc64le as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.5.Z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.ppc64le"
},
"product_reference": "java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.ppc64le",
"relates_to_product_reference": "7Server-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.5.Z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.s390x"
},
"product_reference": "java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.s390x",
"relates_to_product_reference": "7Server-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.5.Z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.x86_64"
},
"product_reference": "java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.x86_64",
"relates_to_product_reference": "7Server-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.aarch64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.5.Z:java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.aarch64"
},
"product_reference": "java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.aarch64",
"relates_to_product_reference": "7Server-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.5.Z:java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.i686"
},
"product_reference": "java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.i686",
"relates_to_product_reference": "7Server-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.5.Z:java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.ppc64"
},
"product_reference": "java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.ppc64",
"relates_to_product_reference": "7Server-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.ppc64le as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.5.Z:java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.ppc64le"
},
"product_reference": "java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.ppc64le",
"relates_to_product_reference": "7Server-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.5.Z:java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.x86_64"
},
"product_reference": "java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.x86_64",
"relates_to_product_reference": "7Server-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.aarch64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.5.Z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.aarch64"
},
"product_reference": "java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.aarch64",
"relates_to_product_reference": "7Server-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.5.Z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.i686"
},
"product_reference": "java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.i686",
"relates_to_product_reference": "7Server-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.5.Z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.ppc64"
},
"product_reference": "java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.ppc64",
"relates_to_product_reference": "7Server-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.ppc64le as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.5.Z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.ppc64le"
},
"product_reference": "java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.ppc64le",
"relates_to_product_reference": "7Server-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.5.Z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.s390x"
},
"product_reference": "java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.s390x",
"relates_to_product_reference": "7Server-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.5.Z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.x86_64"
},
"product_reference": "java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.x86_64",
"relates_to_product_reference": "7Server-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.aarch64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.5.Z:java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.aarch64"
},
"product_reference": "java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.aarch64",
"relates_to_product_reference": "7Server-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.5.Z:java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.i686"
},
"product_reference": "java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.i686",
"relates_to_product_reference": "7Server-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.5.Z:java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.ppc64"
},
"product_reference": "java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.ppc64",
"relates_to_product_reference": "7Server-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.ppc64le as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.5.Z:java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.ppc64le"
},
"product_reference": "java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.ppc64le",
"relates_to_product_reference": "7Server-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.5.Z:java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.x86_64"
},
"product_reference": "java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.x86_64",
"relates_to_product_reference": "7Server-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-javadoc-1:1.8.0.181-3.b13.el7_5.noarch as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.5.Z:java-1.8.0-openjdk-javadoc-1:1.8.0.181-3.b13.el7_5.noarch"
},
"product_reference": "java-1.8.0-openjdk-javadoc-1:1.8.0.181-3.b13.el7_5.noarch",
"relates_to_product_reference": "7Server-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-javadoc-debug-1:1.8.0.181-3.b13.el7_5.noarch as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.5.Z:java-1.8.0-openjdk-javadoc-debug-1:1.8.0.181-3.b13.el7_5.noarch"
},
"product_reference": "java-1.8.0-openjdk-javadoc-debug-1:1.8.0.181-3.b13.el7_5.noarch",
"relates_to_product_reference": "7Server-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-javadoc-zip-1:1.8.0.181-3.b13.el7_5.noarch as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.5.Z:java-1.8.0-openjdk-javadoc-zip-1:1.8.0.181-3.b13.el7_5.noarch"
},
"product_reference": "java-1.8.0-openjdk-javadoc-zip-1:1.8.0.181-3.b13.el7_5.noarch",
"relates_to_product_reference": "7Server-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-javadoc-zip-debug-1:1.8.0.181-3.b13.el7_5.noarch as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.5.Z:java-1.8.0-openjdk-javadoc-zip-debug-1:1.8.0.181-3.b13.el7_5.noarch"
},
"product_reference": "java-1.8.0-openjdk-javadoc-zip-debug-1:1.8.0.181-3.b13.el7_5.noarch",
"relates_to_product_reference": "7Server-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.aarch64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.5.Z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.aarch64"
},
"product_reference": "java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.aarch64",
"relates_to_product_reference": "7Server-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.5.Z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.i686"
},
"product_reference": "java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.i686",
"relates_to_product_reference": "7Server-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.5.Z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.ppc64"
},
"product_reference": "java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.ppc64",
"relates_to_product_reference": "7Server-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.ppc64le as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.5.Z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.ppc64le"
},
"product_reference": "java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.ppc64le",
"relates_to_product_reference": "7Server-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.5.Z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.s390x"
},
"product_reference": "java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.s390x",
"relates_to_product_reference": "7Server-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.5.Z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.x86_64"
},
"product_reference": "java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.x86_64",
"relates_to_product_reference": "7Server-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.aarch64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.5.Z:java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.aarch64"
},
"product_reference": "java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.aarch64",
"relates_to_product_reference": "7Server-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.5.Z:java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.i686"
},
"product_reference": "java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.i686",
"relates_to_product_reference": "7Server-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.5.Z:java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.ppc64"
},
"product_reference": "java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.ppc64",
"relates_to_product_reference": "7Server-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.ppc64le as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.5.Z:java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.ppc64le"
},
"product_reference": "java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.ppc64le",
"relates_to_product_reference": "7Server-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.5.Z:java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.x86_64"
},
"product_reference": "java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.x86_64",
"relates_to_product_reference": "7Server-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.aarch64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)",
"product_id": "7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.aarch64"
},
"product_reference": "java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.aarch64",
"relates_to_product_reference": "7Server-optional-Alt-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.i686 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)",
"product_id": "7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.i686"
},
"product_reference": "java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.i686",
"relates_to_product_reference": "7Server-optional-Alt-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.ppc64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)",
"product_id": "7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.ppc64"
},
"product_reference": "java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.ppc64",
"relates_to_product_reference": "7Server-optional-Alt-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.ppc64le as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)",
"product_id": "7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.ppc64le"
},
"product_reference": "java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.ppc64le",
"relates_to_product_reference": "7Server-optional-Alt-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.s390x as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)",
"product_id": "7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.s390x"
},
"product_reference": "java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.s390x",
"relates_to_product_reference": "7Server-optional-Alt-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.src as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)",
"product_id": "7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.src"
},
"product_reference": "java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.src",
"relates_to_product_reference": "7Server-optional-Alt-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.x86_64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)",
"product_id": "7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.x86_64"
},
"product_reference": "java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.x86_64",
"relates_to_product_reference": "7Server-optional-Alt-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.aarch64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)",
"product_id": "7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.aarch64"
},
"product_reference": "java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.aarch64",
"relates_to_product_reference": "7Server-optional-Alt-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.i686 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)",
"product_id": "7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.i686"
},
"product_reference": "java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.i686",
"relates_to_product_reference": "7Server-optional-Alt-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.ppc64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)",
"product_id": "7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.ppc64"
},
"product_reference": "java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.ppc64",
"relates_to_product_reference": "7Server-optional-Alt-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.ppc64le as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)",
"product_id": "7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.ppc64le"
},
"product_reference": "java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.ppc64le",
"relates_to_product_reference": "7Server-optional-Alt-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.s390x as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)",
"product_id": "7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.s390x"
},
"product_reference": "java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.s390x",
"relates_to_product_reference": "7Server-optional-Alt-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.x86_64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)",
"product_id": "7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.x86_64"
},
"product_reference": "java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.x86_64",
"relates_to_product_reference": "7Server-optional-Alt-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.aarch64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)",
"product_id": "7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.aarch64"
},
"product_reference": "java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.aarch64",
"relates_to_product_reference": "7Server-optional-Alt-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.i686 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)",
"product_id": "7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.i686"
},
"product_reference": "java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.i686",
"relates_to_product_reference": "7Server-optional-Alt-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.ppc64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)",
"product_id": "7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.ppc64"
},
"product_reference": "java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.ppc64",
"relates_to_product_reference": "7Server-optional-Alt-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.ppc64le as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)",
"product_id": "7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.ppc64le"
},
"product_reference": "java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.ppc64le",
"relates_to_product_reference": "7Server-optional-Alt-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.x86_64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)",
"product_id": "7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.x86_64"
},
"product_reference": "java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.x86_64",
"relates_to_product_reference": "7Server-optional-Alt-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.aarch64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)",
"product_id": "7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.aarch64"
},
"product_reference": "java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.aarch64",
"relates_to_product_reference": "7Server-optional-Alt-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.i686 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)",
"product_id": "7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.i686"
},
"product_reference": "java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.i686",
"relates_to_product_reference": "7Server-optional-Alt-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.ppc64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)",
"product_id": "7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.ppc64"
},
"product_reference": "java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.ppc64",
"relates_to_product_reference": "7Server-optional-Alt-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.ppc64le as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)",
"product_id": "7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.ppc64le"
},
"product_reference": "java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.ppc64le",
"relates_to_product_reference": "7Server-optional-Alt-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.x86_64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)",
"product_id": "7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.x86_64"
},
"product_reference": "java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.x86_64",
"relates_to_product_reference": "7Server-optional-Alt-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.aarch64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)",
"product_id": "7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.aarch64"
},
"product_reference": "java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.aarch64",
"relates_to_product_reference": "7Server-optional-Alt-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.i686 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)",
"product_id": "7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.i686"
},
"product_reference": "java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.i686",
"relates_to_product_reference": "7Server-optional-Alt-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.ppc64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)",
"product_id": "7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.ppc64"
},
"product_reference": "java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.ppc64",
"relates_to_product_reference": "7Server-optional-Alt-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.ppc64le as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)",
"product_id": "7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.ppc64le"
},
"product_reference": "java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.ppc64le",
"relates_to_product_reference": "7Server-optional-Alt-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.s390x as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)",
"product_id": "7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.s390x"
},
"product_reference": "java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.s390x",
"relates_to_product_reference": "7Server-optional-Alt-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.x86_64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)",
"product_id": "7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.x86_64"
},
"product_reference": "java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.x86_64",
"relates_to_product_reference": "7Server-optional-Alt-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.aarch64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)",
"product_id": "7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.aarch64"
},
"product_reference": "java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.aarch64",
"relates_to_product_reference": "7Server-optional-Alt-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.i686 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)",
"product_id": "7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.i686"
},
"product_reference": "java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.i686",
"relates_to_product_reference": "7Server-optional-Alt-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.ppc64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)",
"product_id": "7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.ppc64"
},
"product_reference": "java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.ppc64",
"relates_to_product_reference": "7Server-optional-Alt-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.ppc64le as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)",
"product_id": "7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.ppc64le"
},
"product_reference": "java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.ppc64le",
"relates_to_product_reference": "7Server-optional-Alt-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.s390x as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)",
"product_id": "7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.s390x"
},
"product_reference": "java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.s390x",
"relates_to_product_reference": "7Server-optional-Alt-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.x86_64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)",
"product_id": "7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.x86_64"
},
"product_reference": "java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.x86_64",
"relates_to_product_reference": "7Server-optional-Alt-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.aarch64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)",
"product_id": "7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.aarch64"
},
"product_reference": "java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.aarch64",
"relates_to_product_reference": "7Server-optional-Alt-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.i686 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)",
"product_id": "7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.i686"
},
"product_reference": "java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.i686",
"relates_to_product_reference": "7Server-optional-Alt-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.ppc64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)",
"product_id": "7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.ppc64"
},
"product_reference": "java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.ppc64",
"relates_to_product_reference": "7Server-optional-Alt-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.ppc64le as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)",
"product_id": "7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.ppc64le"
},
"product_reference": "java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.ppc64le",
"relates_to_product_reference": "7Server-optional-Alt-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.x86_64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)",
"product_id": "7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.x86_64"
},
"product_reference": "java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.x86_64",
"relates_to_product_reference": "7Server-optional-Alt-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.aarch64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)",
"product_id": "7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.aarch64"
},
"product_reference": "java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.aarch64",
"relates_to_product_reference": "7Server-optional-Alt-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.i686 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)",
"product_id": "7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.i686"
},
"product_reference": "java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.i686",
"relates_to_product_reference": "7Server-optional-Alt-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.ppc64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)",
"product_id": "7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.ppc64"
},
"product_reference": "java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.ppc64",
"relates_to_product_reference": "7Server-optional-Alt-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.ppc64le as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)",
"product_id": "7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.ppc64le"
},
"product_reference": "java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.ppc64le",
"relates_to_product_reference": "7Server-optional-Alt-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.s390x as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)",
"product_id": "7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.s390x"
},
"product_reference": "java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.s390x",
"relates_to_product_reference": "7Server-optional-Alt-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.x86_64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)",
"product_id": "7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.x86_64"
},
"product_reference": "java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.x86_64",
"relates_to_product_reference": "7Server-optional-Alt-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.aarch64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)",
"product_id": "7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.aarch64"
},
"product_reference": "java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.aarch64",
"relates_to_product_reference": "7Server-optional-Alt-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.i686 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)",
"product_id": "7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.i686"
},
"product_reference": "java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.i686",
"relates_to_product_reference": "7Server-optional-Alt-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.ppc64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)",
"product_id": "7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.ppc64"
},
"product_reference": "java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.ppc64",
"relates_to_product_reference": "7Server-optional-Alt-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.ppc64le as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)",
"product_id": "7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.ppc64le"
},
"product_reference": "java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.ppc64le",
"relates_to_product_reference": "7Server-optional-Alt-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.x86_64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)",
"product_id": "7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.x86_64"
},
"product_reference": "java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.x86_64",
"relates_to_product_reference": "7Server-optional-Alt-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.aarch64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)",
"product_id": "7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.aarch64"
},
"product_reference": "java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.aarch64",
"relates_to_product_reference": "7Server-optional-Alt-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.i686 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)",
"product_id": "7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.i686"
},
"product_reference": "java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.i686",
"relates_to_product_reference": "7Server-optional-Alt-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.ppc64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)",
"product_id": "7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.ppc64"
},
"product_reference": "java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.ppc64",
"relates_to_product_reference": "7Server-optional-Alt-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.ppc64le as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)",
"product_id": "7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.ppc64le"
},
"product_reference": "java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.ppc64le",
"relates_to_product_reference": "7Server-optional-Alt-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.s390x as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)",
"product_id": "7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.s390x"
},
"product_reference": "java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.s390x",
"relates_to_product_reference": "7Server-optional-Alt-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.x86_64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)",
"product_id": "7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.x86_64"
},
"product_reference": "java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.x86_64",
"relates_to_product_reference": "7Server-optional-Alt-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.aarch64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)",
"product_id": "7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.aarch64"
},
"product_reference": "java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.aarch64",
"relates_to_product_reference": "7Server-optional-Alt-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.i686 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)",
"product_id": "7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.i686"
},
"product_reference": "java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.i686",
"relates_to_product_reference": "7Server-optional-Alt-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.ppc64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)",
"product_id": "7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.ppc64"
},
"product_reference": "java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.ppc64",
"relates_to_product_reference": "7Server-optional-Alt-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.ppc64le as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)",
"product_id": "7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.ppc64le"
},
"product_reference": "java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.ppc64le",
"relates_to_product_reference": "7Server-optional-Alt-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.x86_64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)",
"product_id": "7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.x86_64"
},
"product_reference": "java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.x86_64",
"relates_to_product_reference": "7Server-optional-Alt-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-javadoc-1:1.8.0.181-3.b13.el7_5.noarch as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)",
"product_id": "7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-javadoc-1:1.8.0.181-3.b13.el7_5.noarch"
},
"product_reference": "java-1.8.0-openjdk-javadoc-1:1.8.0.181-3.b13.el7_5.noarch",
"relates_to_product_reference": "7Server-optional-Alt-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-javadoc-debug-1:1.8.0.181-3.b13.el7_5.noarch as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)",
"product_id": "7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-javadoc-debug-1:1.8.0.181-3.b13.el7_5.noarch"
},
"product_reference": "java-1.8.0-openjdk-javadoc-debug-1:1.8.0.181-3.b13.el7_5.noarch",
"relates_to_product_reference": "7Server-optional-Alt-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-javadoc-zip-1:1.8.0.181-3.b13.el7_5.noarch as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)",
"product_id": "7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-javadoc-zip-1:1.8.0.181-3.b13.el7_5.noarch"
},
"product_reference": "java-1.8.0-openjdk-javadoc-zip-1:1.8.0.181-3.b13.el7_5.noarch",
"relates_to_product_reference": "7Server-optional-Alt-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-javadoc-zip-debug-1:1.8.0.181-3.b13.el7_5.noarch as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)",
"product_id": "7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-javadoc-zip-debug-1:1.8.0.181-3.b13.el7_5.noarch"
},
"product_reference": "java-1.8.0-openjdk-javadoc-zip-debug-1:1.8.0.181-3.b13.el7_5.noarch",
"relates_to_product_reference": "7Server-optional-Alt-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.aarch64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)",
"product_id": "7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.aarch64"
},
"product_reference": "java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.aarch64",
"relates_to_product_reference": "7Server-optional-Alt-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.i686 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)",
"product_id": "7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.i686"
},
"product_reference": "java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.i686",
"relates_to_product_reference": "7Server-optional-Alt-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.ppc64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)",
"product_id": "7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.ppc64"
},
"product_reference": "java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.ppc64",
"relates_to_product_reference": "7Server-optional-Alt-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.ppc64le as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)",
"product_id": "7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.ppc64le"
},
"product_reference": "java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.ppc64le",
"relates_to_product_reference": "7Server-optional-Alt-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.s390x as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)",
"product_id": "7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.s390x"
},
"product_reference": "java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.s390x",
"relates_to_product_reference": "7Server-optional-Alt-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.x86_64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)",
"product_id": "7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.x86_64"
},
"product_reference": "java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.x86_64",
"relates_to_product_reference": "7Server-optional-Alt-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.aarch64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)",
"product_id": "7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.aarch64"
},
"product_reference": "java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.aarch64",
"relates_to_product_reference": "7Server-optional-Alt-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.i686 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)",
"product_id": "7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.i686"
},
"product_reference": "java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.i686",
"relates_to_product_reference": "7Server-optional-Alt-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.ppc64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)",
"product_id": "7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.ppc64"
},
"product_reference": "java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.ppc64",
"relates_to_product_reference": "7Server-optional-Alt-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.ppc64le as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)",
"product_id": "7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.ppc64le"
},
"product_reference": "java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.ppc64le",
"relates_to_product_reference": "7Server-optional-Alt-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.x86_64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)",
"product_id": "7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.x86_64"
},
"product_reference": "java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.x86_64",
"relates_to_product_reference": "7Server-optional-Alt-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.aarch64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.aarch64"
},
"product_reference": "java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.aarch64",
"relates_to_product_reference": "7Workstation-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.i686 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.i686"
},
"product_reference": "java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.i686",
"relates_to_product_reference": "7Workstation-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.ppc64"
},
"product_reference": "java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.ppc64",
"relates_to_product_reference": "7Workstation-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.ppc64le as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.ppc64le"
},
"product_reference": "java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.ppc64le",
"relates_to_product_reference": "7Workstation-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.s390x as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.s390x"
},
"product_reference": "java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.s390x",
"relates_to_product_reference": "7Workstation-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.src as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.src"
},
"product_reference": "java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.src",
"relates_to_product_reference": "7Workstation-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.x86_64"
},
"product_reference": "java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.x86_64",
"relates_to_product_reference": "7Workstation-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.aarch64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.5.Z:java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.aarch64"
},
"product_reference": "java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.aarch64",
"relates_to_product_reference": "7Workstation-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.i686 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.5.Z:java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.i686"
},
"product_reference": "java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.i686",
"relates_to_product_reference": "7Workstation-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.5.Z:java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.ppc64"
},
"product_reference": "java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.ppc64",
"relates_to_product_reference": "7Workstation-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.ppc64le as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.5.Z:java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.ppc64le"
},
"product_reference": "java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.ppc64le",
"relates_to_product_reference": "7Workstation-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.s390x as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.5.Z:java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.s390x"
},
"product_reference": "java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.s390x",
"relates_to_product_reference": "7Workstation-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.5.Z:java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.x86_64"
},
"product_reference": "java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.x86_64",
"relates_to_product_reference": "7Workstation-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.aarch64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.5.Z:java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.aarch64"
},
"product_reference": "java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.aarch64",
"relates_to_product_reference": "7Workstation-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.i686 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.5.Z:java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.i686"
},
"product_reference": "java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.i686",
"relates_to_product_reference": "7Workstation-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.5.Z:java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.ppc64"
},
"product_reference": "java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.ppc64",
"relates_to_product_reference": "7Workstation-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.ppc64le as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.5.Z:java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.ppc64le"
},
"product_reference": "java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.ppc64le",
"relates_to_product_reference": "7Workstation-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.5.Z:java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.x86_64"
},
"product_reference": "java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.x86_64",
"relates_to_product_reference": "7Workstation-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.aarch64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.5.Z:java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.aarch64"
},
"product_reference": "java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.aarch64",
"relates_to_product_reference": "7Workstation-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.i686 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.5.Z:java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.i686"
},
"product_reference": "java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.i686",
"relates_to_product_reference": "7Workstation-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.5.Z:java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.ppc64"
},
"product_reference": "java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.ppc64",
"relates_to_product_reference": "7Workstation-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.ppc64le as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.5.Z:java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.ppc64le"
},
"product_reference": "java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.ppc64le",
"relates_to_product_reference": "7Workstation-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.5.Z:java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.x86_64"
},
"product_reference": "java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.x86_64",
"relates_to_product_reference": "7Workstation-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.aarch64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.5.Z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.aarch64"
},
"product_reference": "java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.aarch64",
"relates_to_product_reference": "7Workstation-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.i686 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.5.Z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.i686"
},
"product_reference": "java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.i686",
"relates_to_product_reference": "7Workstation-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.5.Z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.ppc64"
},
"product_reference": "java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.ppc64",
"relates_to_product_reference": "7Workstation-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.ppc64le as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.5.Z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.ppc64le"
},
"product_reference": "java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.ppc64le",
"relates_to_product_reference": "7Workstation-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.s390x as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.5.Z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.s390x"
},
"product_reference": "java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.s390x",
"relates_to_product_reference": "7Workstation-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.5.Z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.x86_64"
},
"product_reference": "java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.x86_64",
"relates_to_product_reference": "7Workstation-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.aarch64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.5.Z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.aarch64"
},
"product_reference": "java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.aarch64",
"relates_to_product_reference": "7Workstation-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.i686 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.5.Z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.i686"
},
"product_reference": "java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.i686",
"relates_to_product_reference": "7Workstation-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.5.Z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.ppc64"
},
"product_reference": "java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.ppc64",
"relates_to_product_reference": "7Workstation-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.ppc64le as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.5.Z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.ppc64le"
},
"product_reference": "java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.ppc64le",
"relates_to_product_reference": "7Workstation-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.s390x as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.5.Z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.s390x"
},
"product_reference": "java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.s390x",
"relates_to_product_reference": "7Workstation-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.5.Z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.x86_64"
},
"product_reference": "java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.x86_64",
"relates_to_product_reference": "7Workstation-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.aarch64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.5.Z:java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.aarch64"
},
"product_reference": "java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.aarch64",
"relates_to_product_reference": "7Workstation-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.i686 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.5.Z:java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.i686"
},
"product_reference": "java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.i686",
"relates_to_product_reference": "7Workstation-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.5.Z:java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.ppc64"
},
"product_reference": "java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.ppc64",
"relates_to_product_reference": "7Workstation-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.ppc64le as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.5.Z:java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.ppc64le"
},
"product_reference": "java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.ppc64le",
"relates_to_product_reference": "7Workstation-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.5.Z:java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.x86_64"
},
"product_reference": "java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.x86_64",
"relates_to_product_reference": "7Workstation-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.aarch64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.5.Z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.aarch64"
},
"product_reference": "java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.aarch64",
"relates_to_product_reference": "7Workstation-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.i686 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.5.Z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.i686"
},
"product_reference": "java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.i686",
"relates_to_product_reference": "7Workstation-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.5.Z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.ppc64"
},
"product_reference": "java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.ppc64",
"relates_to_product_reference": "7Workstation-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.ppc64le as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.5.Z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.ppc64le"
},
"product_reference": "java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.ppc64le",
"relates_to_product_reference": "7Workstation-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.s390x as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.5.Z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.s390x"
},
"product_reference": "java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.s390x",
"relates_to_product_reference": "7Workstation-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.5.Z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.x86_64"
},
"product_reference": "java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.x86_64",
"relates_to_product_reference": "7Workstation-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.aarch64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.5.Z:java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.aarch64"
},
"product_reference": "java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.aarch64",
"relates_to_product_reference": "7Workstation-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.i686 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.5.Z:java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.i686"
},
"product_reference": "java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.i686",
"relates_to_product_reference": "7Workstation-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.5.Z:java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.ppc64"
},
"product_reference": "java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.ppc64",
"relates_to_product_reference": "7Workstation-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.ppc64le as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.5.Z:java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.ppc64le"
},
"product_reference": "java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.ppc64le",
"relates_to_product_reference": "7Workstation-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.5.Z:java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.x86_64"
},
"product_reference": "java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.x86_64",
"relates_to_product_reference": "7Workstation-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.aarch64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.5.Z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.aarch64"
},
"product_reference": "java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.aarch64",
"relates_to_product_reference": "7Workstation-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.i686 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.5.Z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.i686"
},
"product_reference": "java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.i686",
"relates_to_product_reference": "7Workstation-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.5.Z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.ppc64"
},
"product_reference": "java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.ppc64",
"relates_to_product_reference": "7Workstation-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.ppc64le as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.5.Z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.ppc64le"
},
"product_reference": "java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.ppc64le",
"relates_to_product_reference": "7Workstation-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.s390x as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.5.Z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.s390x"
},
"product_reference": "java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.s390x",
"relates_to_product_reference": "7Workstation-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.5.Z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.x86_64"
},
"product_reference": "java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.x86_64",
"relates_to_product_reference": "7Workstation-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.aarch64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.5.Z:java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.aarch64"
},
"product_reference": "java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.aarch64",
"relates_to_product_reference": "7Workstation-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.i686 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.5.Z:java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.i686"
},
"product_reference": "java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.i686",
"relates_to_product_reference": "7Workstation-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.5.Z:java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.ppc64"
},
"product_reference": "java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.ppc64",
"relates_to_product_reference": "7Workstation-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.ppc64le as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.5.Z:java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.ppc64le"
},
"product_reference": "java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.ppc64le",
"relates_to_product_reference": "7Workstation-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.5.Z:java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.x86_64"
},
"product_reference": "java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.x86_64",
"relates_to_product_reference": "7Workstation-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-javadoc-1:1.8.0.181-3.b13.el7_5.noarch as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.5.Z:java-1.8.0-openjdk-javadoc-1:1.8.0.181-3.b13.el7_5.noarch"
},
"product_reference": "java-1.8.0-openjdk-javadoc-1:1.8.0.181-3.b13.el7_5.noarch",
"relates_to_product_reference": "7Workstation-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-javadoc-debug-1:1.8.0.181-3.b13.el7_5.noarch as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.5.Z:java-1.8.0-openjdk-javadoc-debug-1:1.8.0.181-3.b13.el7_5.noarch"
},
"product_reference": "java-1.8.0-openjdk-javadoc-debug-1:1.8.0.181-3.b13.el7_5.noarch",
"relates_to_product_reference": "7Workstation-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-javadoc-zip-1:1.8.0.181-3.b13.el7_5.noarch as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.5.Z:java-1.8.0-openjdk-javadoc-zip-1:1.8.0.181-3.b13.el7_5.noarch"
},
"product_reference": "java-1.8.0-openjdk-javadoc-zip-1:1.8.0.181-3.b13.el7_5.noarch",
"relates_to_product_reference": "7Workstation-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-javadoc-zip-debug-1:1.8.0.181-3.b13.el7_5.noarch as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.5.Z:java-1.8.0-openjdk-javadoc-zip-debug-1:1.8.0.181-3.b13.el7_5.noarch"
},
"product_reference": "java-1.8.0-openjdk-javadoc-zip-debug-1:1.8.0.181-3.b13.el7_5.noarch",
"relates_to_product_reference": "7Workstation-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.aarch64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.5.Z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.aarch64"
},
"product_reference": "java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.aarch64",
"relates_to_product_reference": "7Workstation-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.i686 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.5.Z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.i686"
},
"product_reference": "java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.i686",
"relates_to_product_reference": "7Workstation-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.5.Z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.ppc64"
},
"product_reference": "java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.ppc64",
"relates_to_product_reference": "7Workstation-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.ppc64le as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.5.Z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.ppc64le"
},
"product_reference": "java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.ppc64le",
"relates_to_product_reference": "7Workstation-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.s390x as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.5.Z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.s390x"
},
"product_reference": "java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.s390x",
"relates_to_product_reference": "7Workstation-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.5.Z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.x86_64"
},
"product_reference": "java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.x86_64",
"relates_to_product_reference": "7Workstation-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.aarch64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.5.Z:java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.aarch64"
},
"product_reference": "java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.aarch64",
"relates_to_product_reference": "7Workstation-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.i686 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.5.Z:java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.i686"
},
"product_reference": "java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.i686",
"relates_to_product_reference": "7Workstation-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.5.Z:java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.ppc64"
},
"product_reference": "java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.ppc64",
"relates_to_product_reference": "7Workstation-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.ppc64le as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.5.Z:java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.ppc64le"
},
"product_reference": "java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.ppc64le",
"relates_to_product_reference": "7Workstation-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.5.Z:java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.x86_64"
},
"product_reference": "java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.x86_64",
"relates_to_product_reference": "7Workstation-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.aarch64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.aarch64"
},
"product_reference": "java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.aarch64",
"relates_to_product_reference": "7Workstation-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.i686 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.i686"
},
"product_reference": "java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.i686",
"relates_to_product_reference": "7Workstation-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.ppc64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.ppc64"
},
"product_reference": "java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.ppc64",
"relates_to_product_reference": "7Workstation-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.ppc64le as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.ppc64le"
},
"product_reference": "java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.ppc64le",
"relates_to_product_reference": "7Workstation-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.s390x as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.s390x"
},
"product_reference": "java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.s390x",
"relates_to_product_reference": "7Workstation-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.src as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.src"
},
"product_reference": "java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.src",
"relates_to_product_reference": "7Workstation-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.x86_64"
},
"product_reference": "java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.x86_64",
"relates_to_product_reference": "7Workstation-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.aarch64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.5.Z:java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.aarch64"
},
"product_reference": "java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.aarch64",
"relates_to_product_reference": "7Workstation-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.i686 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.5.Z:java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.i686"
},
"product_reference": "java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.i686",
"relates_to_product_reference": "7Workstation-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.ppc64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.5.Z:java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.ppc64"
},
"product_reference": "java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.ppc64",
"relates_to_product_reference": "7Workstation-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.ppc64le as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.5.Z:java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.ppc64le"
},
"product_reference": "java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.ppc64le",
"relates_to_product_reference": "7Workstation-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.s390x as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.5.Z:java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.s390x"
},
"product_reference": "java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.s390x",
"relates_to_product_reference": "7Workstation-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.5.Z:java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.x86_64"
},
"product_reference": "java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.x86_64",
"relates_to_product_reference": "7Workstation-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.aarch64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.5.Z:java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.aarch64"
},
"product_reference": "java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.aarch64",
"relates_to_product_reference": "7Workstation-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.i686 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.5.Z:java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.i686"
},
"product_reference": "java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.i686",
"relates_to_product_reference": "7Workstation-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.ppc64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.5.Z:java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.ppc64"
},
"product_reference": "java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.ppc64",
"relates_to_product_reference": "7Workstation-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.ppc64le as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.5.Z:java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.ppc64le"
},
"product_reference": "java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.ppc64le",
"relates_to_product_reference": "7Workstation-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.5.Z:java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.x86_64"
},
"product_reference": "java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.x86_64",
"relates_to_product_reference": "7Workstation-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.aarch64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.5.Z:java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.aarch64"
},
"product_reference": "java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.aarch64",
"relates_to_product_reference": "7Workstation-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.i686 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.5.Z:java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.i686"
},
"product_reference": "java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.i686",
"relates_to_product_reference": "7Workstation-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.ppc64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.5.Z:java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.ppc64"
},
"product_reference": "java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.ppc64",
"relates_to_product_reference": "7Workstation-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.ppc64le as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.5.Z:java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.ppc64le"
},
"product_reference": "java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.ppc64le",
"relates_to_product_reference": "7Workstation-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.5.Z:java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.x86_64"
},
"product_reference": "java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.x86_64",
"relates_to_product_reference": "7Workstation-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.aarch64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.5.Z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.aarch64"
},
"product_reference": "java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.aarch64",
"relates_to_product_reference": "7Workstation-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.i686 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.5.Z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.i686"
},
"product_reference": "java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.i686",
"relates_to_product_reference": "7Workstation-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.ppc64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.5.Z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.ppc64"
},
"product_reference": "java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.ppc64",
"relates_to_product_reference": "7Workstation-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.ppc64le as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.5.Z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.ppc64le"
},
"product_reference": "java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.ppc64le",
"relates_to_product_reference": "7Workstation-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.s390x as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.5.Z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.s390x"
},
"product_reference": "java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.s390x",
"relates_to_product_reference": "7Workstation-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.5.Z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.x86_64"
},
"product_reference": "java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.x86_64",
"relates_to_product_reference": "7Workstation-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.aarch64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.5.Z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.aarch64"
},
"product_reference": "java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.aarch64",
"relates_to_product_reference": "7Workstation-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.i686 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.5.Z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.i686"
},
"product_reference": "java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.i686",
"relates_to_product_reference": "7Workstation-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.ppc64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.5.Z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.ppc64"
},
"product_reference": "java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.ppc64",
"relates_to_product_reference": "7Workstation-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.ppc64le as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.5.Z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.ppc64le"
},
"product_reference": "java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.ppc64le",
"relates_to_product_reference": "7Workstation-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.s390x as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.5.Z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.s390x"
},
"product_reference": "java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.s390x",
"relates_to_product_reference": "7Workstation-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.5.Z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.x86_64"
},
"product_reference": "java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.x86_64",
"relates_to_product_reference": "7Workstation-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.aarch64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.5.Z:java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.aarch64"
},
"product_reference": "java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.aarch64",
"relates_to_product_reference": "7Workstation-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.i686 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.5.Z:java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.i686"
},
"product_reference": "java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.i686",
"relates_to_product_reference": "7Workstation-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.ppc64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.5.Z:java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.ppc64"
},
"product_reference": "java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.ppc64",
"relates_to_product_reference": "7Workstation-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.ppc64le as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.5.Z:java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.ppc64le"
},
"product_reference": "java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.ppc64le",
"relates_to_product_reference": "7Workstation-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.5.Z:java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.x86_64"
},
"product_reference": "java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.x86_64",
"relates_to_product_reference": "7Workstation-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.aarch64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.5.Z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.aarch64"
},
"product_reference": "java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.aarch64",
"relates_to_product_reference": "7Workstation-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.i686 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.5.Z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.i686"
},
"product_reference": "java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.i686",
"relates_to_product_reference": "7Workstation-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.ppc64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.5.Z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.ppc64"
},
"product_reference": "java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.ppc64",
"relates_to_product_reference": "7Workstation-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.ppc64le as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.5.Z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.ppc64le"
},
"product_reference": "java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.ppc64le",
"relates_to_product_reference": "7Workstation-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.s390x as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.5.Z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.s390x"
},
"product_reference": "java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.s390x",
"relates_to_product_reference": "7Workstation-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.5.Z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.x86_64"
},
"product_reference": "java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.x86_64",
"relates_to_product_reference": "7Workstation-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.aarch64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.5.Z:java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.aarch64"
},
"product_reference": "java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.aarch64",
"relates_to_product_reference": "7Workstation-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.i686 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.5.Z:java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.i686"
},
"product_reference": "java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.i686",
"relates_to_product_reference": "7Workstation-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.ppc64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.5.Z:java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.ppc64"
},
"product_reference": "java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.ppc64",
"relates_to_product_reference": "7Workstation-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.ppc64le as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.5.Z:java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.ppc64le"
},
"product_reference": "java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.ppc64le",
"relates_to_product_reference": "7Workstation-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.5.Z:java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.x86_64"
},
"product_reference": "java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.x86_64",
"relates_to_product_reference": "7Workstation-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.aarch64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.5.Z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.aarch64"
},
"product_reference": "java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.aarch64",
"relates_to_product_reference": "7Workstation-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.i686 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.5.Z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.i686"
},
"product_reference": "java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.i686",
"relates_to_product_reference": "7Workstation-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.ppc64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.5.Z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.ppc64"
},
"product_reference": "java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.ppc64",
"relates_to_product_reference": "7Workstation-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.ppc64le as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.5.Z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.ppc64le"
},
"product_reference": "java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.ppc64le",
"relates_to_product_reference": "7Workstation-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.s390x as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.5.Z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.s390x"
},
"product_reference": "java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.s390x",
"relates_to_product_reference": "7Workstation-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.5.Z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.x86_64"
},
"product_reference": "java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.x86_64",
"relates_to_product_reference": "7Workstation-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.aarch64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.5.Z:java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.aarch64"
},
"product_reference": "java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.aarch64",
"relates_to_product_reference": "7Workstation-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.i686 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.5.Z:java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.i686"
},
"product_reference": "java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.i686",
"relates_to_product_reference": "7Workstation-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.ppc64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.5.Z:java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.ppc64"
},
"product_reference": "java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.ppc64",
"relates_to_product_reference": "7Workstation-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.ppc64le as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.5.Z:java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.ppc64le"
},
"product_reference": "java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.ppc64le",
"relates_to_product_reference": "7Workstation-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.5.Z:java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.x86_64"
},
"product_reference": "java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.x86_64",
"relates_to_product_reference": "7Workstation-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-javadoc-1:1.8.0.181-3.b13.el7_5.noarch as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.5.Z:java-1.8.0-openjdk-javadoc-1:1.8.0.181-3.b13.el7_5.noarch"
},
"product_reference": "java-1.8.0-openjdk-javadoc-1:1.8.0.181-3.b13.el7_5.noarch",
"relates_to_product_reference": "7Workstation-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-javadoc-debug-1:1.8.0.181-3.b13.el7_5.noarch as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.5.Z:java-1.8.0-openjdk-javadoc-debug-1:1.8.0.181-3.b13.el7_5.noarch"
},
"product_reference": "java-1.8.0-openjdk-javadoc-debug-1:1.8.0.181-3.b13.el7_5.noarch",
"relates_to_product_reference": "7Workstation-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-javadoc-zip-1:1.8.0.181-3.b13.el7_5.noarch as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.5.Z:java-1.8.0-openjdk-javadoc-zip-1:1.8.0.181-3.b13.el7_5.noarch"
},
"product_reference": "java-1.8.0-openjdk-javadoc-zip-1:1.8.0.181-3.b13.el7_5.noarch",
"relates_to_product_reference": "7Workstation-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-javadoc-zip-debug-1:1.8.0.181-3.b13.el7_5.noarch as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.5.Z:java-1.8.0-openjdk-javadoc-zip-debug-1:1.8.0.181-3.b13.el7_5.noarch"
},
"product_reference": "java-1.8.0-openjdk-javadoc-zip-debug-1:1.8.0.181-3.b13.el7_5.noarch",
"relates_to_product_reference": "7Workstation-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.aarch64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.5.Z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.aarch64"
},
"product_reference": "java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.aarch64",
"relates_to_product_reference": "7Workstation-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.i686 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.5.Z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.i686"
},
"product_reference": "java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.i686",
"relates_to_product_reference": "7Workstation-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.ppc64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.5.Z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.ppc64"
},
"product_reference": "java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.ppc64",
"relates_to_product_reference": "7Workstation-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.ppc64le as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.5.Z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.ppc64le"
},
"product_reference": "java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.ppc64le",
"relates_to_product_reference": "7Workstation-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.s390x as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.5.Z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.s390x"
},
"product_reference": "java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.s390x",
"relates_to_product_reference": "7Workstation-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.5.Z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.x86_64"
},
"product_reference": "java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.x86_64",
"relates_to_product_reference": "7Workstation-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.aarch64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.5.Z:java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.aarch64"
},
"product_reference": "java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.aarch64",
"relates_to_product_reference": "7Workstation-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.i686 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.5.Z:java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.i686"
},
"product_reference": "java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.i686",
"relates_to_product_reference": "7Workstation-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.ppc64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.5.Z:java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.ppc64"
},
"product_reference": "java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.ppc64",
"relates_to_product_reference": "7Workstation-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.ppc64le as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.5.Z:java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.ppc64le"
},
"product_reference": "java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.ppc64le",
"relates_to_product_reference": "7Workstation-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.5.Z:java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.x86_64"
},
"product_reference": "java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.x86_64",
"relates_to_product_reference": "7Workstation-optional-7.5.Z"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2018-2952",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2018-07-11T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1600925"
}
],
"notes": [
{
"category": "description",
"text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Concurrency). Supported versions that are affected are Java SE: 6u191, 7u181, 8u172 and 10.0.1; Java SE Embedded: 8u171; JRockit: R28.3.18. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 3.7 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK: insufficient index validation in PatternSyntaxException getMessage() (Concurrency, 8199547)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Client-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Client-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.i686",
"7Client-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Client-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Client-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.s390x",
"7Client-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.src",
"7Client-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Client-7.5.Z:java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Client-7.5.Z:java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.i686",
"7Client-7.5.Z:java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Client-7.5.Z:java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Client-7.5.Z:java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.s390x",
"7Client-7.5.Z:java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Client-7.5.Z:java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Client-7.5.Z:java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.i686",
"7Client-7.5.Z:java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Client-7.5.Z:java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Client-7.5.Z:java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Client-7.5.Z:java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Client-7.5.Z:java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.i686",
"7Client-7.5.Z:java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Client-7.5.Z:java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Client-7.5.Z:java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Client-7.5.Z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Client-7.5.Z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.i686",
"7Client-7.5.Z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Client-7.5.Z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Client-7.5.Z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.s390x",
"7Client-7.5.Z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Client-7.5.Z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Client-7.5.Z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.i686",
"7Client-7.5.Z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Client-7.5.Z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Client-7.5.Z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.s390x",
"7Client-7.5.Z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Client-7.5.Z:java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Client-7.5.Z:java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.i686",
"7Client-7.5.Z:java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Client-7.5.Z:java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Client-7.5.Z:java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Client-7.5.Z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Client-7.5.Z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.i686",
"7Client-7.5.Z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Client-7.5.Z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Client-7.5.Z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.s390x",
"7Client-7.5.Z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Client-7.5.Z:java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Client-7.5.Z:java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.i686",
"7Client-7.5.Z:java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Client-7.5.Z:java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Client-7.5.Z:java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Client-7.5.Z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Client-7.5.Z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.i686",
"7Client-7.5.Z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Client-7.5.Z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Client-7.5.Z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.s390x",
"7Client-7.5.Z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Client-7.5.Z:java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Client-7.5.Z:java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.i686",
"7Client-7.5.Z:java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Client-7.5.Z:java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Client-7.5.Z:java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Client-7.5.Z:java-1.8.0-openjdk-javadoc-1:1.8.0.181-3.b13.el7_5.noarch",
"7Client-7.5.Z:java-1.8.0-openjdk-javadoc-debug-1:1.8.0.181-3.b13.el7_5.noarch",
"7Client-7.5.Z:java-1.8.0-openjdk-javadoc-zip-1:1.8.0.181-3.b13.el7_5.noarch",
"7Client-7.5.Z:java-1.8.0-openjdk-javadoc-zip-debug-1:1.8.0.181-3.b13.el7_5.noarch",
"7Client-7.5.Z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Client-7.5.Z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.i686",
"7Client-7.5.Z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Client-7.5.Z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Client-7.5.Z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.s390x",
"7Client-7.5.Z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Client-7.5.Z:java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Client-7.5.Z:java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.i686",
"7Client-7.5.Z:java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Client-7.5.Z:java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Client-7.5.Z:java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Client-optional-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Client-optional-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.i686",
"7Client-optional-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Client-optional-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Client-optional-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.s390x",
"7Client-optional-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.src",
"7Client-optional-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Client-optional-7.5.Z:java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Client-optional-7.5.Z:java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.i686",
"7Client-optional-7.5.Z:java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Client-optional-7.5.Z:java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Client-optional-7.5.Z:java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.s390x",
"7Client-optional-7.5.Z:java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Client-optional-7.5.Z:java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Client-optional-7.5.Z:java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.i686",
"7Client-optional-7.5.Z:java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Client-optional-7.5.Z:java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Client-optional-7.5.Z:java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Client-optional-7.5.Z:java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Client-optional-7.5.Z:java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.i686",
"7Client-optional-7.5.Z:java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Client-optional-7.5.Z:java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Client-optional-7.5.Z:java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Client-optional-7.5.Z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Client-optional-7.5.Z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.i686",
"7Client-optional-7.5.Z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Client-optional-7.5.Z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Client-optional-7.5.Z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.s390x",
"7Client-optional-7.5.Z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Client-optional-7.5.Z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Client-optional-7.5.Z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.i686",
"7Client-optional-7.5.Z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Client-optional-7.5.Z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Client-optional-7.5.Z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.s390x",
"7Client-optional-7.5.Z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Client-optional-7.5.Z:java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Client-optional-7.5.Z:java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.i686",
"7Client-optional-7.5.Z:java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Client-optional-7.5.Z:java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Client-optional-7.5.Z:java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Client-optional-7.5.Z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Client-optional-7.5.Z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.i686",
"7Client-optional-7.5.Z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Client-optional-7.5.Z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Client-optional-7.5.Z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.s390x",
"7Client-optional-7.5.Z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Client-optional-7.5.Z:java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Client-optional-7.5.Z:java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.i686",
"7Client-optional-7.5.Z:java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Client-optional-7.5.Z:java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Client-optional-7.5.Z:java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Client-optional-7.5.Z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Client-optional-7.5.Z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.i686",
"7Client-optional-7.5.Z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Client-optional-7.5.Z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Client-optional-7.5.Z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.s390x",
"7Client-optional-7.5.Z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Client-optional-7.5.Z:java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Client-optional-7.5.Z:java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.i686",
"7Client-optional-7.5.Z:java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Client-optional-7.5.Z:java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Client-optional-7.5.Z:java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Client-optional-7.5.Z:java-1.8.0-openjdk-javadoc-1:1.8.0.181-3.b13.el7_5.noarch",
"7Client-optional-7.5.Z:java-1.8.0-openjdk-javadoc-debug-1:1.8.0.181-3.b13.el7_5.noarch",
"7Client-optional-7.5.Z:java-1.8.0-openjdk-javadoc-zip-1:1.8.0.181-3.b13.el7_5.noarch",
"7Client-optional-7.5.Z:java-1.8.0-openjdk-javadoc-zip-debug-1:1.8.0.181-3.b13.el7_5.noarch",
"7Client-optional-7.5.Z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Client-optional-7.5.Z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.i686",
"7Client-optional-7.5.Z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Client-optional-7.5.Z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Client-optional-7.5.Z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.s390x",
"7Client-optional-7.5.Z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Client-optional-7.5.Z:java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Client-optional-7.5.Z:java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.i686",
"7Client-optional-7.5.Z:java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Client-optional-7.5.Z:java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Client-optional-7.5.Z:java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.x86_64",
"7ComputeNode-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.aarch64",
"7ComputeNode-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.i686",
"7ComputeNode-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.ppc64",
"7ComputeNode-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7ComputeNode-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.s390x",
"7ComputeNode-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.src",
"7ComputeNode-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.x86_64",
"7ComputeNode-7.5.Z:java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.aarch64",
"7ComputeNode-7.5.Z:java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.i686",
"7ComputeNode-7.5.Z:java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.ppc64",
"7ComputeNode-7.5.Z:java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7ComputeNode-7.5.Z:java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.s390x",
"7ComputeNode-7.5.Z:java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.x86_64",
"7ComputeNode-7.5.Z:java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.aarch64",
"7ComputeNode-7.5.Z:java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.i686",
"7ComputeNode-7.5.Z:java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.ppc64",
"7ComputeNode-7.5.Z:java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7ComputeNode-7.5.Z:java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.x86_64",
"7ComputeNode-7.5.Z:java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.aarch64",
"7ComputeNode-7.5.Z:java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.i686",
"7ComputeNode-7.5.Z:java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.ppc64",
"7ComputeNode-7.5.Z:java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7ComputeNode-7.5.Z:java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.x86_64",
"7ComputeNode-7.5.Z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.aarch64",
"7ComputeNode-7.5.Z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.i686",
"7ComputeNode-7.5.Z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.ppc64",
"7ComputeNode-7.5.Z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7ComputeNode-7.5.Z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.s390x",
"7ComputeNode-7.5.Z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.x86_64",
"7ComputeNode-7.5.Z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.aarch64",
"7ComputeNode-7.5.Z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.i686",
"7ComputeNode-7.5.Z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.ppc64",
"7ComputeNode-7.5.Z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7ComputeNode-7.5.Z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.s390x",
"7ComputeNode-7.5.Z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.x86_64",
"7ComputeNode-7.5.Z:java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.aarch64",
"7ComputeNode-7.5.Z:java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.i686",
"7ComputeNode-7.5.Z:java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.ppc64",
"7ComputeNode-7.5.Z:java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7ComputeNode-7.5.Z:java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.x86_64",
"7ComputeNode-7.5.Z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.aarch64",
"7ComputeNode-7.5.Z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.i686",
"7ComputeNode-7.5.Z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.ppc64",
"7ComputeNode-7.5.Z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7ComputeNode-7.5.Z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.s390x",
"7ComputeNode-7.5.Z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.x86_64",
"7ComputeNode-7.5.Z:java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.aarch64",
"7ComputeNode-7.5.Z:java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.i686",
"7ComputeNode-7.5.Z:java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.ppc64",
"7ComputeNode-7.5.Z:java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7ComputeNode-7.5.Z:java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.x86_64",
"7ComputeNode-7.5.Z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.aarch64",
"7ComputeNode-7.5.Z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.i686",
"7ComputeNode-7.5.Z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.ppc64",
"7ComputeNode-7.5.Z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7ComputeNode-7.5.Z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.s390x",
"7ComputeNode-7.5.Z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.x86_64",
"7ComputeNode-7.5.Z:java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.aarch64",
"7ComputeNode-7.5.Z:java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.i686",
"7ComputeNode-7.5.Z:java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.ppc64",
"7ComputeNode-7.5.Z:java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7ComputeNode-7.5.Z:java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.x86_64",
"7ComputeNode-7.5.Z:java-1.8.0-openjdk-javadoc-1:1.8.0.181-3.b13.el7_5.noarch",
"7ComputeNode-7.5.Z:java-1.8.0-openjdk-javadoc-debug-1:1.8.0.181-3.b13.el7_5.noarch",
"7ComputeNode-7.5.Z:java-1.8.0-openjdk-javadoc-zip-1:1.8.0.181-3.b13.el7_5.noarch",
"7ComputeNode-7.5.Z:java-1.8.0-openjdk-javadoc-zip-debug-1:1.8.0.181-3.b13.el7_5.noarch",
"7ComputeNode-7.5.Z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.aarch64",
"7ComputeNode-7.5.Z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.i686",
"7ComputeNode-7.5.Z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.ppc64",
"7ComputeNode-7.5.Z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7ComputeNode-7.5.Z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.s390x",
"7ComputeNode-7.5.Z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.x86_64",
"7ComputeNode-7.5.Z:java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.aarch64",
"7ComputeNode-7.5.Z:java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.i686",
"7ComputeNode-7.5.Z:java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.ppc64",
"7ComputeNode-7.5.Z:java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7ComputeNode-7.5.Z:java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.x86_64",
"7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.aarch64",
"7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.i686",
"7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.ppc64",
"7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.s390x",
"7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.src",
"7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.x86_64",
"7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.aarch64",
"7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.i686",
"7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.ppc64",
"7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.s390x",
"7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.x86_64",
"7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.aarch64",
"7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.i686",
"7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.ppc64",
"7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.x86_64",
"7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.aarch64",
"7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.i686",
"7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.ppc64",
"7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.x86_64",
"7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.aarch64",
"7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.i686",
"7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.ppc64",
"7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.s390x",
"7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.x86_64",
"7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.aarch64",
"7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.i686",
"7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.ppc64",
"7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.s390x",
"7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.x86_64",
"7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.aarch64",
"7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.i686",
"7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.ppc64",
"7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.x86_64",
"7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.aarch64",
"7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.i686",
"7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.ppc64",
"7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.s390x",
"7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.x86_64",
"7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.aarch64",
"7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.i686",
"7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.ppc64",
"7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.x86_64",
"7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.aarch64",
"7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.i686",
"7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.ppc64",
"7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.s390x",
"7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.x86_64",
"7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.aarch64",
"7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.i686",
"7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.ppc64",
"7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.x86_64",
"7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-javadoc-1:1.8.0.181-3.b13.el7_5.noarch",
"7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-javadoc-debug-1:1.8.0.181-3.b13.el7_5.noarch",
"7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-javadoc-zip-1:1.8.0.181-3.b13.el7_5.noarch",
"7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-javadoc-zip-debug-1:1.8.0.181-3.b13.el7_5.noarch",
"7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.aarch64",
"7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.i686",
"7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.ppc64",
"7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.s390x",
"7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.x86_64",
"7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.aarch64",
"7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.i686",
"7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.ppc64",
"7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Server-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Server-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.i686",
"7Server-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Server-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Server-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.s390x",
"7Server-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.src",
"7Server-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Server-7.5.Z:java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Server-7.5.Z:java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.i686",
"7Server-7.5.Z:java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Server-7.5.Z:java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Server-7.5.Z:java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.s390x",
"7Server-7.5.Z:java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Server-7.5.Z:java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Server-7.5.Z:java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.i686",
"7Server-7.5.Z:java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Server-7.5.Z:java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Server-7.5.Z:java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Server-7.5.Z:java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Server-7.5.Z:java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.i686",
"7Server-7.5.Z:java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Server-7.5.Z:java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Server-7.5.Z:java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Server-7.5.Z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Server-7.5.Z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.i686",
"7Server-7.5.Z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Server-7.5.Z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Server-7.5.Z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.s390x",
"7Server-7.5.Z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Server-7.5.Z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Server-7.5.Z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.i686",
"7Server-7.5.Z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Server-7.5.Z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Server-7.5.Z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.s390x",
"7Server-7.5.Z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Server-7.5.Z:java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Server-7.5.Z:java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.i686",
"7Server-7.5.Z:java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Server-7.5.Z:java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Server-7.5.Z:java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Server-7.5.Z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Server-7.5.Z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.i686",
"7Server-7.5.Z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Server-7.5.Z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Server-7.5.Z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.s390x",
"7Server-7.5.Z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Server-7.5.Z:java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Server-7.5.Z:java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.i686",
"7Server-7.5.Z:java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Server-7.5.Z:java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Server-7.5.Z:java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Server-7.5.Z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Server-7.5.Z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.i686",
"7Server-7.5.Z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Server-7.5.Z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Server-7.5.Z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.s390x",
"7Server-7.5.Z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Server-7.5.Z:java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Server-7.5.Z:java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.i686",
"7Server-7.5.Z:java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Server-7.5.Z:java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Server-7.5.Z:java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Server-7.5.Z:java-1.8.0-openjdk-javadoc-1:1.8.0.181-3.b13.el7_5.noarch",
"7Server-7.5.Z:java-1.8.0-openjdk-javadoc-debug-1:1.8.0.181-3.b13.el7_5.noarch",
"7Server-7.5.Z:java-1.8.0-openjdk-javadoc-zip-1:1.8.0.181-3.b13.el7_5.noarch",
"7Server-7.5.Z:java-1.8.0-openjdk-javadoc-zip-debug-1:1.8.0.181-3.b13.el7_5.noarch",
"7Server-7.5.Z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Server-7.5.Z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.i686",
"7Server-7.5.Z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Server-7.5.Z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Server-7.5.Z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.s390x",
"7Server-7.5.Z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Server-7.5.Z:java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Server-7.5.Z:java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.i686",
"7Server-7.5.Z:java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Server-7.5.Z:java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Server-7.5.Z:java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Server-Alt-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Server-Alt-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.i686",
"7Server-Alt-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Server-Alt-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Server-Alt-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.s390x",
"7Server-Alt-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.src",
"7Server-Alt-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Server-Alt-7.5.Z:java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Server-Alt-7.5.Z:java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.i686",
"7Server-Alt-7.5.Z:java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Server-Alt-7.5.Z:java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Server-Alt-7.5.Z:java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.s390x",
"7Server-Alt-7.5.Z:java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Server-Alt-7.5.Z:java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Server-Alt-7.5.Z:java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.i686",
"7Server-Alt-7.5.Z:java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Server-Alt-7.5.Z:java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Server-Alt-7.5.Z:java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Server-Alt-7.5.Z:java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Server-Alt-7.5.Z:java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.i686",
"7Server-Alt-7.5.Z:java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Server-Alt-7.5.Z:java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Server-Alt-7.5.Z:java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Server-Alt-7.5.Z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Server-Alt-7.5.Z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.i686",
"7Server-Alt-7.5.Z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Server-Alt-7.5.Z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Server-Alt-7.5.Z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.s390x",
"7Server-Alt-7.5.Z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Server-Alt-7.5.Z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Server-Alt-7.5.Z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.i686",
"7Server-Alt-7.5.Z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Server-Alt-7.5.Z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Server-Alt-7.5.Z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.s390x",
"7Server-Alt-7.5.Z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Server-Alt-7.5.Z:java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Server-Alt-7.5.Z:java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.i686",
"7Server-Alt-7.5.Z:java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Server-Alt-7.5.Z:java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Server-Alt-7.5.Z:java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Server-Alt-7.5.Z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Server-Alt-7.5.Z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.i686",
"7Server-Alt-7.5.Z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Server-Alt-7.5.Z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Server-Alt-7.5.Z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.s390x",
"7Server-Alt-7.5.Z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Server-Alt-7.5.Z:java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Server-Alt-7.5.Z:java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.i686",
"7Server-Alt-7.5.Z:java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Server-Alt-7.5.Z:java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Server-Alt-7.5.Z:java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Server-Alt-7.5.Z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Server-Alt-7.5.Z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.i686",
"7Server-Alt-7.5.Z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Server-Alt-7.5.Z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Server-Alt-7.5.Z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.s390x",
"7Server-Alt-7.5.Z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Server-Alt-7.5.Z:java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Server-Alt-7.5.Z:java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.i686",
"7Server-Alt-7.5.Z:java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Server-Alt-7.5.Z:java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Server-Alt-7.5.Z:java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Server-Alt-7.5.Z:java-1.8.0-openjdk-javadoc-1:1.8.0.181-3.b13.el7_5.noarch",
"7Server-Alt-7.5.Z:java-1.8.0-openjdk-javadoc-debug-1:1.8.0.181-3.b13.el7_5.noarch",
"7Server-Alt-7.5.Z:java-1.8.0-openjdk-javadoc-zip-1:1.8.0.181-3.b13.el7_5.noarch",
"7Server-Alt-7.5.Z:java-1.8.0-openjdk-javadoc-zip-debug-1:1.8.0.181-3.b13.el7_5.noarch",
"7Server-Alt-7.5.Z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Server-Alt-7.5.Z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.i686",
"7Server-Alt-7.5.Z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Server-Alt-7.5.Z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Server-Alt-7.5.Z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.s390x",
"7Server-Alt-7.5.Z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Server-Alt-7.5.Z:java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Server-Alt-7.5.Z:java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.i686",
"7Server-Alt-7.5.Z:java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Server-Alt-7.5.Z:java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Server-Alt-7.5.Z:java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Server-optional-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Server-optional-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.i686",
"7Server-optional-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Server-optional-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Server-optional-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.s390x",
"7Server-optional-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.src",
"7Server-optional-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Server-optional-7.5.Z:java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Server-optional-7.5.Z:java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.i686",
"7Server-optional-7.5.Z:java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Server-optional-7.5.Z:java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Server-optional-7.5.Z:java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.s390x",
"7Server-optional-7.5.Z:java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Server-optional-7.5.Z:java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Server-optional-7.5.Z:java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.i686",
"7Server-optional-7.5.Z:java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Server-optional-7.5.Z:java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Server-optional-7.5.Z:java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Server-optional-7.5.Z:java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Server-optional-7.5.Z:java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.i686",
"7Server-optional-7.5.Z:java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Server-optional-7.5.Z:java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Server-optional-7.5.Z:java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Server-optional-7.5.Z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Server-optional-7.5.Z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.i686",
"7Server-optional-7.5.Z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Server-optional-7.5.Z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Server-optional-7.5.Z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.s390x",
"7Server-optional-7.5.Z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Server-optional-7.5.Z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Server-optional-7.5.Z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.i686",
"7Server-optional-7.5.Z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Server-optional-7.5.Z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Server-optional-7.5.Z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.s390x",
"7Server-optional-7.5.Z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Server-optional-7.5.Z:java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Server-optional-7.5.Z:java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.i686",
"7Server-optional-7.5.Z:java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Server-optional-7.5.Z:java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Server-optional-7.5.Z:java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Server-optional-7.5.Z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Server-optional-7.5.Z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.i686",
"7Server-optional-7.5.Z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Server-optional-7.5.Z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Server-optional-7.5.Z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.s390x",
"7Server-optional-7.5.Z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Server-optional-7.5.Z:java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Server-optional-7.5.Z:java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.i686",
"7Server-optional-7.5.Z:java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Server-optional-7.5.Z:java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Server-optional-7.5.Z:java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Server-optional-7.5.Z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Server-optional-7.5.Z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.i686",
"7Server-optional-7.5.Z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Server-optional-7.5.Z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Server-optional-7.5.Z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.s390x",
"7Server-optional-7.5.Z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Server-optional-7.5.Z:java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Server-optional-7.5.Z:java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.i686",
"7Server-optional-7.5.Z:java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Server-optional-7.5.Z:java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Server-optional-7.5.Z:java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Server-optional-7.5.Z:java-1.8.0-openjdk-javadoc-1:1.8.0.181-3.b13.el7_5.noarch",
"7Server-optional-7.5.Z:java-1.8.0-openjdk-javadoc-debug-1:1.8.0.181-3.b13.el7_5.noarch",
"7Server-optional-7.5.Z:java-1.8.0-openjdk-javadoc-zip-1:1.8.0.181-3.b13.el7_5.noarch",
"7Server-optional-7.5.Z:java-1.8.0-openjdk-javadoc-zip-debug-1:1.8.0.181-3.b13.el7_5.noarch",
"7Server-optional-7.5.Z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Server-optional-7.5.Z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.i686",
"7Server-optional-7.5.Z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Server-optional-7.5.Z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Server-optional-7.5.Z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.s390x",
"7Server-optional-7.5.Z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Server-optional-7.5.Z:java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Server-optional-7.5.Z:java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.i686",
"7Server-optional-7.5.Z:java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Server-optional-7.5.Z:java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Server-optional-7.5.Z:java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.i686",
"7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.s390x",
"7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.src",
"7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.i686",
"7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.s390x",
"7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.i686",
"7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.i686",
"7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.i686",
"7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.s390x",
"7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.i686",
"7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.s390x",
"7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.i686",
"7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.i686",
"7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.s390x",
"7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.i686",
"7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.i686",
"7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.s390x",
"7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.i686",
"7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-javadoc-1:1.8.0.181-3.b13.el7_5.noarch",
"7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-javadoc-debug-1:1.8.0.181-3.b13.el7_5.noarch",
"7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-javadoc-zip-1:1.8.0.181-3.b13.el7_5.noarch",
"7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-javadoc-zip-debug-1:1.8.0.181-3.b13.el7_5.noarch",
"7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.i686",
"7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.s390x",
"7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.i686",
"7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Workstation-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Workstation-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.i686",
"7Workstation-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Workstation-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Workstation-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.s390x",
"7Workstation-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.src",
"7Workstation-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Workstation-7.5.Z:java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Workstation-7.5.Z:java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.i686",
"7Workstation-7.5.Z:java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Workstation-7.5.Z:java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Workstation-7.5.Z:java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.s390x",
"7Workstation-7.5.Z:java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Workstation-7.5.Z:java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Workstation-7.5.Z:java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.i686",
"7Workstation-7.5.Z:java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Workstation-7.5.Z:java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Workstation-7.5.Z:java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Workstation-7.5.Z:java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Workstation-7.5.Z:java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.i686",
"7Workstation-7.5.Z:java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Workstation-7.5.Z:java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Workstation-7.5.Z:java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Workstation-7.5.Z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Workstation-7.5.Z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.i686",
"7Workstation-7.5.Z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Workstation-7.5.Z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Workstation-7.5.Z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.s390x",
"7Workstation-7.5.Z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Workstation-7.5.Z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Workstation-7.5.Z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.i686",
"7Workstation-7.5.Z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Workstation-7.5.Z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Workstation-7.5.Z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.s390x",
"7Workstation-7.5.Z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Workstation-7.5.Z:java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Workstation-7.5.Z:java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.i686",
"7Workstation-7.5.Z:java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Workstation-7.5.Z:java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Workstation-7.5.Z:java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Workstation-7.5.Z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Workstation-7.5.Z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.i686",
"7Workstation-7.5.Z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Workstation-7.5.Z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Workstation-7.5.Z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.s390x",
"7Workstation-7.5.Z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Workstation-7.5.Z:java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Workstation-7.5.Z:java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.i686",
"7Workstation-7.5.Z:java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Workstation-7.5.Z:java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Workstation-7.5.Z:java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Workstation-7.5.Z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Workstation-7.5.Z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.i686",
"7Workstation-7.5.Z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Workstation-7.5.Z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Workstation-7.5.Z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.s390x",
"7Workstation-7.5.Z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Workstation-7.5.Z:java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Workstation-7.5.Z:java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.i686",
"7Workstation-7.5.Z:java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Workstation-7.5.Z:java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Workstation-7.5.Z:java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Workstation-7.5.Z:java-1.8.0-openjdk-javadoc-1:1.8.0.181-3.b13.el7_5.noarch",
"7Workstation-7.5.Z:java-1.8.0-openjdk-javadoc-debug-1:1.8.0.181-3.b13.el7_5.noarch",
"7Workstation-7.5.Z:java-1.8.0-openjdk-javadoc-zip-1:1.8.0.181-3.b13.el7_5.noarch",
"7Workstation-7.5.Z:java-1.8.0-openjdk-javadoc-zip-debug-1:1.8.0.181-3.b13.el7_5.noarch",
"7Workstation-7.5.Z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Workstation-7.5.Z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.i686",
"7Workstation-7.5.Z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Workstation-7.5.Z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Workstation-7.5.Z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.s390x",
"7Workstation-7.5.Z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Workstation-7.5.Z:java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Workstation-7.5.Z:java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.i686",
"7Workstation-7.5.Z:java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Workstation-7.5.Z:java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Workstation-7.5.Z:java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Workstation-optional-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Workstation-optional-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.i686",
"7Workstation-optional-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Workstation-optional-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Workstation-optional-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.s390x",
"7Workstation-optional-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.src",
"7Workstation-optional-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Workstation-optional-7.5.Z:java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Workstation-optional-7.5.Z:java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.i686",
"7Workstation-optional-7.5.Z:java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Workstation-optional-7.5.Z:java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Workstation-optional-7.5.Z:java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.s390x",
"7Workstation-optional-7.5.Z:java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Workstation-optional-7.5.Z:java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Workstation-optional-7.5.Z:java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.i686",
"7Workstation-optional-7.5.Z:java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Workstation-optional-7.5.Z:java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Workstation-optional-7.5.Z:java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Workstation-optional-7.5.Z:java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Workstation-optional-7.5.Z:java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.i686",
"7Workstation-optional-7.5.Z:java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Workstation-optional-7.5.Z:java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Workstation-optional-7.5.Z:java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Workstation-optional-7.5.Z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Workstation-optional-7.5.Z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.i686",
"7Workstation-optional-7.5.Z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Workstation-optional-7.5.Z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Workstation-optional-7.5.Z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.s390x",
"7Workstation-optional-7.5.Z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Workstation-optional-7.5.Z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Workstation-optional-7.5.Z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.i686",
"7Workstation-optional-7.5.Z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Workstation-optional-7.5.Z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Workstation-optional-7.5.Z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.s390x",
"7Workstation-optional-7.5.Z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Workstation-optional-7.5.Z:java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Workstation-optional-7.5.Z:java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.i686",
"7Workstation-optional-7.5.Z:java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Workstation-optional-7.5.Z:java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Workstation-optional-7.5.Z:java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Workstation-optional-7.5.Z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Workstation-optional-7.5.Z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.i686",
"7Workstation-optional-7.5.Z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Workstation-optional-7.5.Z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Workstation-optional-7.5.Z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.s390x",
"7Workstation-optional-7.5.Z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Workstation-optional-7.5.Z:java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Workstation-optional-7.5.Z:java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.i686",
"7Workstation-optional-7.5.Z:java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Workstation-optional-7.5.Z:java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Workstation-optional-7.5.Z:java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Workstation-optional-7.5.Z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Workstation-optional-7.5.Z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.i686",
"7Workstation-optional-7.5.Z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Workstation-optional-7.5.Z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Workstation-optional-7.5.Z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.s390x",
"7Workstation-optional-7.5.Z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Workstation-optional-7.5.Z:java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Workstation-optional-7.5.Z:java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.i686",
"7Workstation-optional-7.5.Z:java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Workstation-optional-7.5.Z:java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Workstation-optional-7.5.Z:java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Workstation-optional-7.5.Z:java-1.8.0-openjdk-javadoc-1:1.8.0.181-3.b13.el7_5.noarch",
"7Workstation-optional-7.5.Z:java-1.8.0-openjdk-javadoc-debug-1:1.8.0.181-3.b13.el7_5.noarch",
"7Workstation-optional-7.5.Z:java-1.8.0-openjdk-javadoc-zip-1:1.8.0.181-3.b13.el7_5.noarch",
"7Workstation-optional-7.5.Z:java-1.8.0-openjdk-javadoc-zip-debug-1:1.8.0.181-3.b13.el7_5.noarch",
"7Workstation-optional-7.5.Z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Workstation-optional-7.5.Z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.i686",
"7Workstation-optional-7.5.Z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Workstation-optional-7.5.Z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Workstation-optional-7.5.Z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.s390x",
"7Workstation-optional-7.5.Z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Workstation-optional-7.5.Z:java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Workstation-optional-7.5.Z:java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.i686",
"7Workstation-optional-7.5.Z:java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Workstation-optional-7.5.Z:java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Workstation-optional-7.5.Z:java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-2952"
},
{
"category": "external",
"summary": "RHBZ#1600925",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1600925"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-2952",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-2952"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2952",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2952"
}
],
"release_date": "2018-07-17T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-07-23T15:20:25+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of OpenJDK Java must be restarted for this update to take effect.",
"product_ids": [
"7Client-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Client-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.i686",
"7Client-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Client-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Client-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.s390x",
"7Client-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.src",
"7Client-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Client-7.5.Z:java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Client-7.5.Z:java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.i686",
"7Client-7.5.Z:java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Client-7.5.Z:java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Client-7.5.Z:java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.s390x",
"7Client-7.5.Z:java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Client-7.5.Z:java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Client-7.5.Z:java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.i686",
"7Client-7.5.Z:java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Client-7.5.Z:java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Client-7.5.Z:java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Client-7.5.Z:java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Client-7.5.Z:java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.i686",
"7Client-7.5.Z:java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Client-7.5.Z:java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Client-7.5.Z:java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Client-7.5.Z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Client-7.5.Z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.i686",
"7Client-7.5.Z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Client-7.5.Z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Client-7.5.Z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.s390x",
"7Client-7.5.Z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Client-7.5.Z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Client-7.5.Z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.i686",
"7Client-7.5.Z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Client-7.5.Z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Client-7.5.Z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.s390x",
"7Client-7.5.Z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Client-7.5.Z:java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Client-7.5.Z:java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.i686",
"7Client-7.5.Z:java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Client-7.5.Z:java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Client-7.5.Z:java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Client-7.5.Z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Client-7.5.Z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.i686",
"7Client-7.5.Z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Client-7.5.Z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Client-7.5.Z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.s390x",
"7Client-7.5.Z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Client-7.5.Z:java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Client-7.5.Z:java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.i686",
"7Client-7.5.Z:java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Client-7.5.Z:java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Client-7.5.Z:java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Client-7.5.Z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Client-7.5.Z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.i686",
"7Client-7.5.Z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Client-7.5.Z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Client-7.5.Z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.s390x",
"7Client-7.5.Z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Client-7.5.Z:java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Client-7.5.Z:java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.i686",
"7Client-7.5.Z:java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Client-7.5.Z:java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Client-7.5.Z:java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Client-7.5.Z:java-1.8.0-openjdk-javadoc-1:1.8.0.181-3.b13.el7_5.noarch",
"7Client-7.5.Z:java-1.8.0-openjdk-javadoc-debug-1:1.8.0.181-3.b13.el7_5.noarch",
"7Client-7.5.Z:java-1.8.0-openjdk-javadoc-zip-1:1.8.0.181-3.b13.el7_5.noarch",
"7Client-7.5.Z:java-1.8.0-openjdk-javadoc-zip-debug-1:1.8.0.181-3.b13.el7_5.noarch",
"7Client-7.5.Z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Client-7.5.Z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.i686",
"7Client-7.5.Z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Client-7.5.Z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Client-7.5.Z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.s390x",
"7Client-7.5.Z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Client-7.5.Z:java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Client-7.5.Z:java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.i686",
"7Client-7.5.Z:java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Client-7.5.Z:java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Client-7.5.Z:java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Client-optional-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Client-optional-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.i686",
"7Client-optional-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Client-optional-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Client-optional-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.s390x",
"7Client-optional-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.src",
"7Client-optional-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Client-optional-7.5.Z:java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Client-optional-7.5.Z:java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.i686",
"7Client-optional-7.5.Z:java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Client-optional-7.5.Z:java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Client-optional-7.5.Z:java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.s390x",
"7Client-optional-7.5.Z:java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Client-optional-7.5.Z:java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Client-optional-7.5.Z:java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.i686",
"7Client-optional-7.5.Z:java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Client-optional-7.5.Z:java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Client-optional-7.5.Z:java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Client-optional-7.5.Z:java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Client-optional-7.5.Z:java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.i686",
"7Client-optional-7.5.Z:java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Client-optional-7.5.Z:java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Client-optional-7.5.Z:java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Client-optional-7.5.Z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Client-optional-7.5.Z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.i686",
"7Client-optional-7.5.Z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Client-optional-7.5.Z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Client-optional-7.5.Z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.s390x",
"7Client-optional-7.5.Z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Client-optional-7.5.Z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Client-optional-7.5.Z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.i686",
"7Client-optional-7.5.Z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Client-optional-7.5.Z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Client-optional-7.5.Z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.s390x",
"7Client-optional-7.5.Z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Client-optional-7.5.Z:java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Client-optional-7.5.Z:java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.i686",
"7Client-optional-7.5.Z:java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Client-optional-7.5.Z:java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Client-optional-7.5.Z:java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Client-optional-7.5.Z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Client-optional-7.5.Z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.i686",
"7Client-optional-7.5.Z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Client-optional-7.5.Z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Client-optional-7.5.Z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.s390x",
"7Client-optional-7.5.Z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Client-optional-7.5.Z:java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Client-optional-7.5.Z:java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.i686",
"7Client-optional-7.5.Z:java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Client-optional-7.5.Z:java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Client-optional-7.5.Z:java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Client-optional-7.5.Z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Client-optional-7.5.Z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.i686",
"7Client-optional-7.5.Z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Client-optional-7.5.Z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Client-optional-7.5.Z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.s390x",
"7Client-optional-7.5.Z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Client-optional-7.5.Z:java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Client-optional-7.5.Z:java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.i686",
"7Client-optional-7.5.Z:java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Client-optional-7.5.Z:java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Client-optional-7.5.Z:java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Client-optional-7.5.Z:java-1.8.0-openjdk-javadoc-1:1.8.0.181-3.b13.el7_5.noarch",
"7Client-optional-7.5.Z:java-1.8.0-openjdk-javadoc-debug-1:1.8.0.181-3.b13.el7_5.noarch",
"7Client-optional-7.5.Z:java-1.8.0-openjdk-javadoc-zip-1:1.8.0.181-3.b13.el7_5.noarch",
"7Client-optional-7.5.Z:java-1.8.0-openjdk-javadoc-zip-debug-1:1.8.0.181-3.b13.el7_5.noarch",
"7Client-optional-7.5.Z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Client-optional-7.5.Z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.i686",
"7Client-optional-7.5.Z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Client-optional-7.5.Z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Client-optional-7.5.Z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.s390x",
"7Client-optional-7.5.Z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Client-optional-7.5.Z:java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Client-optional-7.5.Z:java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.i686",
"7Client-optional-7.5.Z:java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Client-optional-7.5.Z:java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Client-optional-7.5.Z:java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.x86_64",
"7ComputeNode-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.aarch64",
"7ComputeNode-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.i686",
"7ComputeNode-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.ppc64",
"7ComputeNode-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7ComputeNode-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.s390x",
"7ComputeNode-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.src",
"7ComputeNode-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.x86_64",
"7ComputeNode-7.5.Z:java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.aarch64",
"7ComputeNode-7.5.Z:java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.i686",
"7ComputeNode-7.5.Z:java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.ppc64",
"7ComputeNode-7.5.Z:java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7ComputeNode-7.5.Z:java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.s390x",
"7ComputeNode-7.5.Z:java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.x86_64",
"7ComputeNode-7.5.Z:java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.aarch64",
"7ComputeNode-7.5.Z:java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.i686",
"7ComputeNode-7.5.Z:java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.ppc64",
"7ComputeNode-7.5.Z:java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7ComputeNode-7.5.Z:java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.x86_64",
"7ComputeNode-7.5.Z:java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.aarch64",
"7ComputeNode-7.5.Z:java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.i686",
"7ComputeNode-7.5.Z:java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.ppc64",
"7ComputeNode-7.5.Z:java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7ComputeNode-7.5.Z:java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.x86_64",
"7ComputeNode-7.5.Z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.aarch64",
"7ComputeNode-7.5.Z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.i686",
"7ComputeNode-7.5.Z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.ppc64",
"7ComputeNode-7.5.Z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7ComputeNode-7.5.Z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.s390x",
"7ComputeNode-7.5.Z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.x86_64",
"7ComputeNode-7.5.Z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.aarch64",
"7ComputeNode-7.5.Z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.i686",
"7ComputeNode-7.5.Z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.ppc64",
"7ComputeNode-7.5.Z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7ComputeNode-7.5.Z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.s390x",
"7ComputeNode-7.5.Z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.x86_64",
"7ComputeNode-7.5.Z:java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.aarch64",
"7ComputeNode-7.5.Z:java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.i686",
"7ComputeNode-7.5.Z:java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.ppc64",
"7ComputeNode-7.5.Z:java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7ComputeNode-7.5.Z:java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.x86_64",
"7ComputeNode-7.5.Z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.aarch64",
"7ComputeNode-7.5.Z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.i686",
"7ComputeNode-7.5.Z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.ppc64",
"7ComputeNode-7.5.Z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7ComputeNode-7.5.Z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.s390x",
"7ComputeNode-7.5.Z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.x86_64",
"7ComputeNode-7.5.Z:java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.aarch64",
"7ComputeNode-7.5.Z:java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.i686",
"7ComputeNode-7.5.Z:java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.ppc64",
"7ComputeNode-7.5.Z:java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7ComputeNode-7.5.Z:java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.x86_64",
"7ComputeNode-7.5.Z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.aarch64",
"7ComputeNode-7.5.Z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.i686",
"7ComputeNode-7.5.Z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.ppc64",
"7ComputeNode-7.5.Z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7ComputeNode-7.5.Z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.s390x",
"7ComputeNode-7.5.Z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.x86_64",
"7ComputeNode-7.5.Z:java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.aarch64",
"7ComputeNode-7.5.Z:java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.i686",
"7ComputeNode-7.5.Z:java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.ppc64",
"7ComputeNode-7.5.Z:java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7ComputeNode-7.5.Z:java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.x86_64",
"7ComputeNode-7.5.Z:java-1.8.0-openjdk-javadoc-1:1.8.0.181-3.b13.el7_5.noarch",
"7ComputeNode-7.5.Z:java-1.8.0-openjdk-javadoc-debug-1:1.8.0.181-3.b13.el7_5.noarch",
"7ComputeNode-7.5.Z:java-1.8.0-openjdk-javadoc-zip-1:1.8.0.181-3.b13.el7_5.noarch",
"7ComputeNode-7.5.Z:java-1.8.0-openjdk-javadoc-zip-debug-1:1.8.0.181-3.b13.el7_5.noarch",
"7ComputeNode-7.5.Z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.aarch64",
"7ComputeNode-7.5.Z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.i686",
"7ComputeNode-7.5.Z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.ppc64",
"7ComputeNode-7.5.Z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7ComputeNode-7.5.Z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.s390x",
"7ComputeNode-7.5.Z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.x86_64",
"7ComputeNode-7.5.Z:java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.aarch64",
"7ComputeNode-7.5.Z:java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.i686",
"7ComputeNode-7.5.Z:java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.ppc64",
"7ComputeNode-7.5.Z:java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7ComputeNode-7.5.Z:java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.x86_64",
"7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.aarch64",
"7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.i686",
"7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.ppc64",
"7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.s390x",
"7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.src",
"7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.x86_64",
"7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.aarch64",
"7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.i686",
"7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.ppc64",
"7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.s390x",
"7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.x86_64",
"7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.aarch64",
"7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.i686",
"7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.ppc64",
"7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.x86_64",
"7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.aarch64",
"7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.i686",
"7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.ppc64",
"7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.x86_64",
"7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.aarch64",
"7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.i686",
"7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.ppc64",
"7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.s390x",
"7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.x86_64",
"7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.aarch64",
"7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.i686",
"7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.ppc64",
"7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.s390x",
"7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.x86_64",
"7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.aarch64",
"7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.i686",
"7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.ppc64",
"7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.x86_64",
"7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.aarch64",
"7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.i686",
"7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.ppc64",
"7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.s390x",
"7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.x86_64",
"7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.aarch64",
"7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.i686",
"7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.ppc64",
"7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.x86_64",
"7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.aarch64",
"7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.i686",
"7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.ppc64",
"7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.s390x",
"7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.x86_64",
"7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.aarch64",
"7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.i686",
"7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.ppc64",
"7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.x86_64",
"7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-javadoc-1:1.8.0.181-3.b13.el7_5.noarch",
"7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-javadoc-debug-1:1.8.0.181-3.b13.el7_5.noarch",
"7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-javadoc-zip-1:1.8.0.181-3.b13.el7_5.noarch",
"7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-javadoc-zip-debug-1:1.8.0.181-3.b13.el7_5.noarch",
"7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.aarch64",
"7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.i686",
"7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.ppc64",
"7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.s390x",
"7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.x86_64",
"7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.aarch64",
"7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.i686",
"7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.ppc64",
"7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Server-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Server-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.i686",
"7Server-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Server-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Server-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.s390x",
"7Server-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.src",
"7Server-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Server-7.5.Z:java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Server-7.5.Z:java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.i686",
"7Server-7.5.Z:java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Server-7.5.Z:java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Server-7.5.Z:java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.s390x",
"7Server-7.5.Z:java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Server-7.5.Z:java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Server-7.5.Z:java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.i686",
"7Server-7.5.Z:java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Server-7.5.Z:java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Server-7.5.Z:java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Server-7.5.Z:java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Server-7.5.Z:java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.i686",
"7Server-7.5.Z:java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Server-7.5.Z:java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Server-7.5.Z:java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Server-7.5.Z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Server-7.5.Z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.i686",
"7Server-7.5.Z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Server-7.5.Z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Server-7.5.Z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.s390x",
"7Server-7.5.Z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Server-7.5.Z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Server-7.5.Z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.i686",
"7Server-7.5.Z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Server-7.5.Z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Server-7.5.Z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.s390x",
"7Server-7.5.Z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Server-7.5.Z:java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Server-7.5.Z:java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.i686",
"7Server-7.5.Z:java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Server-7.5.Z:java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Server-7.5.Z:java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Server-7.5.Z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Server-7.5.Z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.i686",
"7Server-7.5.Z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Server-7.5.Z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Server-7.5.Z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.s390x",
"7Server-7.5.Z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Server-7.5.Z:java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Server-7.5.Z:java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.i686",
"7Server-7.5.Z:java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Server-7.5.Z:java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Server-7.5.Z:java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Server-7.5.Z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Server-7.5.Z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.i686",
"7Server-7.5.Z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Server-7.5.Z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Server-7.5.Z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.s390x",
"7Server-7.5.Z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Server-7.5.Z:java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Server-7.5.Z:java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.i686",
"7Server-7.5.Z:java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Server-7.5.Z:java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Server-7.5.Z:java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Server-7.5.Z:java-1.8.0-openjdk-javadoc-1:1.8.0.181-3.b13.el7_5.noarch",
"7Server-7.5.Z:java-1.8.0-openjdk-javadoc-debug-1:1.8.0.181-3.b13.el7_5.noarch",
"7Server-7.5.Z:java-1.8.0-openjdk-javadoc-zip-1:1.8.0.181-3.b13.el7_5.noarch",
"7Server-7.5.Z:java-1.8.0-openjdk-javadoc-zip-debug-1:1.8.0.181-3.b13.el7_5.noarch",
"7Server-7.5.Z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Server-7.5.Z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.i686",
"7Server-7.5.Z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Server-7.5.Z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Server-7.5.Z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.s390x",
"7Server-7.5.Z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Server-7.5.Z:java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Server-7.5.Z:java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.i686",
"7Server-7.5.Z:java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Server-7.5.Z:java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Server-7.5.Z:java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Server-Alt-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Server-Alt-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.i686",
"7Server-Alt-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Server-Alt-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Server-Alt-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.s390x",
"7Server-Alt-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.src",
"7Server-Alt-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Server-Alt-7.5.Z:java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Server-Alt-7.5.Z:java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.i686",
"7Server-Alt-7.5.Z:java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Server-Alt-7.5.Z:java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Server-Alt-7.5.Z:java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.s390x",
"7Server-Alt-7.5.Z:java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Server-Alt-7.5.Z:java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Server-Alt-7.5.Z:java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.i686",
"7Server-Alt-7.5.Z:java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Server-Alt-7.5.Z:java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Server-Alt-7.5.Z:java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Server-Alt-7.5.Z:java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Server-Alt-7.5.Z:java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.i686",
"7Server-Alt-7.5.Z:java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Server-Alt-7.5.Z:java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Server-Alt-7.5.Z:java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Server-Alt-7.5.Z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Server-Alt-7.5.Z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.i686",
"7Server-Alt-7.5.Z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Server-Alt-7.5.Z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Server-Alt-7.5.Z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.s390x",
"7Server-Alt-7.5.Z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Server-Alt-7.5.Z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Server-Alt-7.5.Z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.i686",
"7Server-Alt-7.5.Z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Server-Alt-7.5.Z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Server-Alt-7.5.Z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.s390x",
"7Server-Alt-7.5.Z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Server-Alt-7.5.Z:java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Server-Alt-7.5.Z:java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.i686",
"7Server-Alt-7.5.Z:java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Server-Alt-7.5.Z:java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Server-Alt-7.5.Z:java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Server-Alt-7.5.Z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Server-Alt-7.5.Z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.i686",
"7Server-Alt-7.5.Z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Server-Alt-7.5.Z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Server-Alt-7.5.Z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.s390x",
"7Server-Alt-7.5.Z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Server-Alt-7.5.Z:java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Server-Alt-7.5.Z:java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.i686",
"7Server-Alt-7.5.Z:java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Server-Alt-7.5.Z:java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Server-Alt-7.5.Z:java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Server-Alt-7.5.Z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Server-Alt-7.5.Z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.i686",
"7Server-Alt-7.5.Z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Server-Alt-7.5.Z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Server-Alt-7.5.Z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.s390x",
"7Server-Alt-7.5.Z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Server-Alt-7.5.Z:java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Server-Alt-7.5.Z:java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.i686",
"7Server-Alt-7.5.Z:java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Server-Alt-7.5.Z:java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Server-Alt-7.5.Z:java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Server-Alt-7.5.Z:java-1.8.0-openjdk-javadoc-1:1.8.0.181-3.b13.el7_5.noarch",
"7Server-Alt-7.5.Z:java-1.8.0-openjdk-javadoc-debug-1:1.8.0.181-3.b13.el7_5.noarch",
"7Server-Alt-7.5.Z:java-1.8.0-openjdk-javadoc-zip-1:1.8.0.181-3.b13.el7_5.noarch",
"7Server-Alt-7.5.Z:java-1.8.0-openjdk-javadoc-zip-debug-1:1.8.0.181-3.b13.el7_5.noarch",
"7Server-Alt-7.5.Z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Server-Alt-7.5.Z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.i686",
"7Server-Alt-7.5.Z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Server-Alt-7.5.Z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Server-Alt-7.5.Z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.s390x",
"7Server-Alt-7.5.Z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Server-Alt-7.5.Z:java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Server-Alt-7.5.Z:java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.i686",
"7Server-Alt-7.5.Z:java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Server-Alt-7.5.Z:java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Server-Alt-7.5.Z:java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Server-optional-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Server-optional-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.i686",
"7Server-optional-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Server-optional-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Server-optional-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.s390x",
"7Server-optional-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.src",
"7Server-optional-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Server-optional-7.5.Z:java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Server-optional-7.5.Z:java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.i686",
"7Server-optional-7.5.Z:java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Server-optional-7.5.Z:java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Server-optional-7.5.Z:java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.s390x",
"7Server-optional-7.5.Z:java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Server-optional-7.5.Z:java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Server-optional-7.5.Z:java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.i686",
"7Server-optional-7.5.Z:java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Server-optional-7.5.Z:java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Server-optional-7.5.Z:java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Server-optional-7.5.Z:java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Server-optional-7.5.Z:java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.i686",
"7Server-optional-7.5.Z:java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Server-optional-7.5.Z:java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Server-optional-7.5.Z:java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Server-optional-7.5.Z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Server-optional-7.5.Z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.i686",
"7Server-optional-7.5.Z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Server-optional-7.5.Z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Server-optional-7.5.Z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.s390x",
"7Server-optional-7.5.Z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Server-optional-7.5.Z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Server-optional-7.5.Z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.i686",
"7Server-optional-7.5.Z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Server-optional-7.5.Z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Server-optional-7.5.Z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.s390x",
"7Server-optional-7.5.Z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Server-optional-7.5.Z:java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Server-optional-7.5.Z:java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.i686",
"7Server-optional-7.5.Z:java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Server-optional-7.5.Z:java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Server-optional-7.5.Z:java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Server-optional-7.5.Z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Server-optional-7.5.Z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.i686",
"7Server-optional-7.5.Z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Server-optional-7.5.Z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Server-optional-7.5.Z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.s390x",
"7Server-optional-7.5.Z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Server-optional-7.5.Z:java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Server-optional-7.5.Z:java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.i686",
"7Server-optional-7.5.Z:java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Server-optional-7.5.Z:java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Server-optional-7.5.Z:java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Server-optional-7.5.Z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Server-optional-7.5.Z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.i686",
"7Server-optional-7.5.Z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Server-optional-7.5.Z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Server-optional-7.5.Z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.s390x",
"7Server-optional-7.5.Z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Server-optional-7.5.Z:java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Server-optional-7.5.Z:java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.i686",
"7Server-optional-7.5.Z:java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Server-optional-7.5.Z:java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Server-optional-7.5.Z:java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Server-optional-7.5.Z:java-1.8.0-openjdk-javadoc-1:1.8.0.181-3.b13.el7_5.noarch",
"7Server-optional-7.5.Z:java-1.8.0-openjdk-javadoc-debug-1:1.8.0.181-3.b13.el7_5.noarch",
"7Server-optional-7.5.Z:java-1.8.0-openjdk-javadoc-zip-1:1.8.0.181-3.b13.el7_5.noarch",
"7Server-optional-7.5.Z:java-1.8.0-openjdk-javadoc-zip-debug-1:1.8.0.181-3.b13.el7_5.noarch",
"7Server-optional-7.5.Z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Server-optional-7.5.Z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.i686",
"7Server-optional-7.5.Z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Server-optional-7.5.Z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Server-optional-7.5.Z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.s390x",
"7Server-optional-7.5.Z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Server-optional-7.5.Z:java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Server-optional-7.5.Z:java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.i686",
"7Server-optional-7.5.Z:java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Server-optional-7.5.Z:java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Server-optional-7.5.Z:java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.i686",
"7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.s390x",
"7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.src",
"7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.i686",
"7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.s390x",
"7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.i686",
"7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.i686",
"7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.i686",
"7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.s390x",
"7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.i686",
"7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.s390x",
"7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.i686",
"7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.i686",
"7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.s390x",
"7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.i686",
"7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.i686",
"7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.s390x",
"7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.i686",
"7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-javadoc-1:1.8.0.181-3.b13.el7_5.noarch",
"7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-javadoc-debug-1:1.8.0.181-3.b13.el7_5.noarch",
"7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-javadoc-zip-1:1.8.0.181-3.b13.el7_5.noarch",
"7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-javadoc-zip-debug-1:1.8.0.181-3.b13.el7_5.noarch",
"7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.i686",
"7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.s390x",
"7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.i686",
"7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Workstation-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Workstation-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.i686",
"7Workstation-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Workstation-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Workstation-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.s390x",
"7Workstation-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.src",
"7Workstation-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Workstation-7.5.Z:java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Workstation-7.5.Z:java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.i686",
"7Workstation-7.5.Z:java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Workstation-7.5.Z:java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Workstation-7.5.Z:java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.s390x",
"7Workstation-7.5.Z:java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Workstation-7.5.Z:java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Workstation-7.5.Z:java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.i686",
"7Workstation-7.5.Z:java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Workstation-7.5.Z:java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Workstation-7.5.Z:java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Workstation-7.5.Z:java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Workstation-7.5.Z:java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.i686",
"7Workstation-7.5.Z:java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Workstation-7.5.Z:java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Workstation-7.5.Z:java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Workstation-7.5.Z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Workstation-7.5.Z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.i686",
"7Workstation-7.5.Z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Workstation-7.5.Z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Workstation-7.5.Z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.s390x",
"7Workstation-7.5.Z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Workstation-7.5.Z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Workstation-7.5.Z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.i686",
"7Workstation-7.5.Z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Workstation-7.5.Z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Workstation-7.5.Z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.s390x",
"7Workstation-7.5.Z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Workstation-7.5.Z:java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Workstation-7.5.Z:java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.i686",
"7Workstation-7.5.Z:java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Workstation-7.5.Z:java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Workstation-7.5.Z:java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Workstation-7.5.Z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Workstation-7.5.Z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.i686",
"7Workstation-7.5.Z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Workstation-7.5.Z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Workstation-7.5.Z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.s390x",
"7Workstation-7.5.Z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Workstation-7.5.Z:java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Workstation-7.5.Z:java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.i686",
"7Workstation-7.5.Z:java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Workstation-7.5.Z:java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Workstation-7.5.Z:java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Workstation-7.5.Z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Workstation-7.5.Z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.i686",
"7Workstation-7.5.Z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Workstation-7.5.Z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Workstation-7.5.Z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.s390x",
"7Workstation-7.5.Z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Workstation-7.5.Z:java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Workstation-7.5.Z:java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.i686",
"7Workstation-7.5.Z:java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Workstation-7.5.Z:java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Workstation-7.5.Z:java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Workstation-7.5.Z:java-1.8.0-openjdk-javadoc-1:1.8.0.181-3.b13.el7_5.noarch",
"7Workstation-7.5.Z:java-1.8.0-openjdk-javadoc-debug-1:1.8.0.181-3.b13.el7_5.noarch",
"7Workstation-7.5.Z:java-1.8.0-openjdk-javadoc-zip-1:1.8.0.181-3.b13.el7_5.noarch",
"7Workstation-7.5.Z:java-1.8.0-openjdk-javadoc-zip-debug-1:1.8.0.181-3.b13.el7_5.noarch",
"7Workstation-7.5.Z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Workstation-7.5.Z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.i686",
"7Workstation-7.5.Z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Workstation-7.5.Z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Workstation-7.5.Z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.s390x",
"7Workstation-7.5.Z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Workstation-7.5.Z:java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Workstation-7.5.Z:java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.i686",
"7Workstation-7.5.Z:java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Workstation-7.5.Z:java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Workstation-7.5.Z:java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Workstation-optional-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Workstation-optional-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.i686",
"7Workstation-optional-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Workstation-optional-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Workstation-optional-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.s390x",
"7Workstation-optional-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.src",
"7Workstation-optional-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Workstation-optional-7.5.Z:java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Workstation-optional-7.5.Z:java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.i686",
"7Workstation-optional-7.5.Z:java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Workstation-optional-7.5.Z:java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Workstation-optional-7.5.Z:java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.s390x",
"7Workstation-optional-7.5.Z:java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Workstation-optional-7.5.Z:java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Workstation-optional-7.5.Z:java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.i686",
"7Workstation-optional-7.5.Z:java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Workstation-optional-7.5.Z:java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Workstation-optional-7.5.Z:java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Workstation-optional-7.5.Z:java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Workstation-optional-7.5.Z:java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.i686",
"7Workstation-optional-7.5.Z:java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Workstation-optional-7.5.Z:java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Workstation-optional-7.5.Z:java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Workstation-optional-7.5.Z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Workstation-optional-7.5.Z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.i686",
"7Workstation-optional-7.5.Z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Workstation-optional-7.5.Z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Workstation-optional-7.5.Z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.s390x",
"7Workstation-optional-7.5.Z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Workstation-optional-7.5.Z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Workstation-optional-7.5.Z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.i686",
"7Workstation-optional-7.5.Z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Workstation-optional-7.5.Z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Workstation-optional-7.5.Z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.s390x",
"7Workstation-optional-7.5.Z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Workstation-optional-7.5.Z:java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Workstation-optional-7.5.Z:java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.i686",
"7Workstation-optional-7.5.Z:java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Workstation-optional-7.5.Z:java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Workstation-optional-7.5.Z:java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Workstation-optional-7.5.Z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Workstation-optional-7.5.Z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.i686",
"7Workstation-optional-7.5.Z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Workstation-optional-7.5.Z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Workstation-optional-7.5.Z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.s390x",
"7Workstation-optional-7.5.Z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Workstation-optional-7.5.Z:java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Workstation-optional-7.5.Z:java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.i686",
"7Workstation-optional-7.5.Z:java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Workstation-optional-7.5.Z:java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Workstation-optional-7.5.Z:java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Workstation-optional-7.5.Z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Workstation-optional-7.5.Z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.i686",
"7Workstation-optional-7.5.Z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Workstation-optional-7.5.Z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Workstation-optional-7.5.Z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.s390x",
"7Workstation-optional-7.5.Z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Workstation-optional-7.5.Z:java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Workstation-optional-7.5.Z:java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.i686",
"7Workstation-optional-7.5.Z:java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Workstation-optional-7.5.Z:java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Workstation-optional-7.5.Z:java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Workstation-optional-7.5.Z:java-1.8.0-openjdk-javadoc-1:1.8.0.181-3.b13.el7_5.noarch",
"7Workstation-optional-7.5.Z:java-1.8.0-openjdk-javadoc-debug-1:1.8.0.181-3.b13.el7_5.noarch",
"7Workstation-optional-7.5.Z:java-1.8.0-openjdk-javadoc-zip-1:1.8.0.181-3.b13.el7_5.noarch",
"7Workstation-optional-7.5.Z:java-1.8.0-openjdk-javadoc-zip-debug-1:1.8.0.181-3.b13.el7_5.noarch",
"7Workstation-optional-7.5.Z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Workstation-optional-7.5.Z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.i686",
"7Workstation-optional-7.5.Z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Workstation-optional-7.5.Z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Workstation-optional-7.5.Z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.s390x",
"7Workstation-optional-7.5.Z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Workstation-optional-7.5.Z:java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Workstation-optional-7.5.Z:java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.i686",
"7Workstation-optional-7.5.Z:java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Workstation-optional-7.5.Z:java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Workstation-optional-7.5.Z:java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:2242"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 3.7,
"baseSeverity": "LOW",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"7Client-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Client-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.i686",
"7Client-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Client-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Client-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.s390x",
"7Client-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.src",
"7Client-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Client-7.5.Z:java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Client-7.5.Z:java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.i686",
"7Client-7.5.Z:java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Client-7.5.Z:java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Client-7.5.Z:java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.s390x",
"7Client-7.5.Z:java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Client-7.5.Z:java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Client-7.5.Z:java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.i686",
"7Client-7.5.Z:java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Client-7.5.Z:java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Client-7.5.Z:java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Client-7.5.Z:java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Client-7.5.Z:java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.i686",
"7Client-7.5.Z:java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Client-7.5.Z:java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Client-7.5.Z:java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Client-7.5.Z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Client-7.5.Z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.i686",
"7Client-7.5.Z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Client-7.5.Z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Client-7.5.Z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.s390x",
"7Client-7.5.Z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Client-7.5.Z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Client-7.5.Z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.i686",
"7Client-7.5.Z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Client-7.5.Z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Client-7.5.Z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.s390x",
"7Client-7.5.Z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Client-7.5.Z:java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Client-7.5.Z:java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.i686",
"7Client-7.5.Z:java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Client-7.5.Z:java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Client-7.5.Z:java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Client-7.5.Z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Client-7.5.Z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.i686",
"7Client-7.5.Z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Client-7.5.Z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Client-7.5.Z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.s390x",
"7Client-7.5.Z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Client-7.5.Z:java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Client-7.5.Z:java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.i686",
"7Client-7.5.Z:java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Client-7.5.Z:java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Client-7.5.Z:java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Client-7.5.Z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Client-7.5.Z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.i686",
"7Client-7.5.Z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Client-7.5.Z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Client-7.5.Z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.s390x",
"7Client-7.5.Z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Client-7.5.Z:java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Client-7.5.Z:java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.i686",
"7Client-7.5.Z:java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Client-7.5.Z:java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Client-7.5.Z:java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Client-7.5.Z:java-1.8.0-openjdk-javadoc-1:1.8.0.181-3.b13.el7_5.noarch",
"7Client-7.5.Z:java-1.8.0-openjdk-javadoc-debug-1:1.8.0.181-3.b13.el7_5.noarch",
"7Client-7.5.Z:java-1.8.0-openjdk-javadoc-zip-1:1.8.0.181-3.b13.el7_5.noarch",
"7Client-7.5.Z:java-1.8.0-openjdk-javadoc-zip-debug-1:1.8.0.181-3.b13.el7_5.noarch",
"7Client-7.5.Z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Client-7.5.Z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.i686",
"7Client-7.5.Z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Client-7.5.Z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Client-7.5.Z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.s390x",
"7Client-7.5.Z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Client-7.5.Z:java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Client-7.5.Z:java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.i686",
"7Client-7.5.Z:java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Client-7.5.Z:java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Client-7.5.Z:java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Client-optional-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Client-optional-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.i686",
"7Client-optional-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Client-optional-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Client-optional-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.s390x",
"7Client-optional-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.src",
"7Client-optional-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Client-optional-7.5.Z:java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Client-optional-7.5.Z:java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.i686",
"7Client-optional-7.5.Z:java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Client-optional-7.5.Z:java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Client-optional-7.5.Z:java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.s390x",
"7Client-optional-7.5.Z:java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Client-optional-7.5.Z:java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Client-optional-7.5.Z:java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.i686",
"7Client-optional-7.5.Z:java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Client-optional-7.5.Z:java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Client-optional-7.5.Z:java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Client-optional-7.5.Z:java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Client-optional-7.5.Z:java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.i686",
"7Client-optional-7.5.Z:java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Client-optional-7.5.Z:java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Client-optional-7.5.Z:java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Client-optional-7.5.Z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Client-optional-7.5.Z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.i686",
"7Client-optional-7.5.Z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Client-optional-7.5.Z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Client-optional-7.5.Z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.s390x",
"7Client-optional-7.5.Z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Client-optional-7.5.Z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Client-optional-7.5.Z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.i686",
"7Client-optional-7.5.Z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Client-optional-7.5.Z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Client-optional-7.5.Z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.s390x",
"7Client-optional-7.5.Z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Client-optional-7.5.Z:java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Client-optional-7.5.Z:java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.i686",
"7Client-optional-7.5.Z:java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Client-optional-7.5.Z:java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Client-optional-7.5.Z:java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Client-optional-7.5.Z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Client-optional-7.5.Z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.i686",
"7Client-optional-7.5.Z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Client-optional-7.5.Z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Client-optional-7.5.Z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.s390x",
"7Client-optional-7.5.Z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Client-optional-7.5.Z:java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Client-optional-7.5.Z:java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.i686",
"7Client-optional-7.5.Z:java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Client-optional-7.5.Z:java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Client-optional-7.5.Z:java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Client-optional-7.5.Z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Client-optional-7.5.Z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.i686",
"7Client-optional-7.5.Z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Client-optional-7.5.Z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Client-optional-7.5.Z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.s390x",
"7Client-optional-7.5.Z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Client-optional-7.5.Z:java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Client-optional-7.5.Z:java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.i686",
"7Client-optional-7.5.Z:java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Client-optional-7.5.Z:java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Client-optional-7.5.Z:java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Client-optional-7.5.Z:java-1.8.0-openjdk-javadoc-1:1.8.0.181-3.b13.el7_5.noarch",
"7Client-optional-7.5.Z:java-1.8.0-openjdk-javadoc-debug-1:1.8.0.181-3.b13.el7_5.noarch",
"7Client-optional-7.5.Z:java-1.8.0-openjdk-javadoc-zip-1:1.8.0.181-3.b13.el7_5.noarch",
"7Client-optional-7.5.Z:java-1.8.0-openjdk-javadoc-zip-debug-1:1.8.0.181-3.b13.el7_5.noarch",
"7Client-optional-7.5.Z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Client-optional-7.5.Z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.i686",
"7Client-optional-7.5.Z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Client-optional-7.5.Z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Client-optional-7.5.Z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.s390x",
"7Client-optional-7.5.Z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Client-optional-7.5.Z:java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Client-optional-7.5.Z:java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.i686",
"7Client-optional-7.5.Z:java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Client-optional-7.5.Z:java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Client-optional-7.5.Z:java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.x86_64",
"7ComputeNode-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.aarch64",
"7ComputeNode-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.i686",
"7ComputeNode-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.ppc64",
"7ComputeNode-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7ComputeNode-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.s390x",
"7ComputeNode-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.src",
"7ComputeNode-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.x86_64",
"7ComputeNode-7.5.Z:java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.aarch64",
"7ComputeNode-7.5.Z:java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.i686",
"7ComputeNode-7.5.Z:java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.ppc64",
"7ComputeNode-7.5.Z:java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7ComputeNode-7.5.Z:java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.s390x",
"7ComputeNode-7.5.Z:java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.x86_64",
"7ComputeNode-7.5.Z:java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.aarch64",
"7ComputeNode-7.5.Z:java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.i686",
"7ComputeNode-7.5.Z:java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.ppc64",
"7ComputeNode-7.5.Z:java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7ComputeNode-7.5.Z:java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.x86_64",
"7ComputeNode-7.5.Z:java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.aarch64",
"7ComputeNode-7.5.Z:java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.i686",
"7ComputeNode-7.5.Z:java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.ppc64",
"7ComputeNode-7.5.Z:java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7ComputeNode-7.5.Z:java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.x86_64",
"7ComputeNode-7.5.Z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.aarch64",
"7ComputeNode-7.5.Z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.i686",
"7ComputeNode-7.5.Z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.ppc64",
"7ComputeNode-7.5.Z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7ComputeNode-7.5.Z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.s390x",
"7ComputeNode-7.5.Z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.x86_64",
"7ComputeNode-7.5.Z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.aarch64",
"7ComputeNode-7.5.Z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.i686",
"7ComputeNode-7.5.Z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.ppc64",
"7ComputeNode-7.5.Z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7ComputeNode-7.5.Z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.s390x",
"7ComputeNode-7.5.Z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.x86_64",
"7ComputeNode-7.5.Z:java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.aarch64",
"7ComputeNode-7.5.Z:java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.i686",
"7ComputeNode-7.5.Z:java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.ppc64",
"7ComputeNode-7.5.Z:java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7ComputeNode-7.5.Z:java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.x86_64",
"7ComputeNode-7.5.Z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.aarch64",
"7ComputeNode-7.5.Z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.i686",
"7ComputeNode-7.5.Z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.ppc64",
"7ComputeNode-7.5.Z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7ComputeNode-7.5.Z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.s390x",
"7ComputeNode-7.5.Z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.x86_64",
"7ComputeNode-7.5.Z:java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.aarch64",
"7ComputeNode-7.5.Z:java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.i686",
"7ComputeNode-7.5.Z:java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.ppc64",
"7ComputeNode-7.5.Z:java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7ComputeNode-7.5.Z:java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.x86_64",
"7ComputeNode-7.5.Z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.aarch64",
"7ComputeNode-7.5.Z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.i686",
"7ComputeNode-7.5.Z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.ppc64",
"7ComputeNode-7.5.Z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7ComputeNode-7.5.Z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.s390x",
"7ComputeNode-7.5.Z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.x86_64",
"7ComputeNode-7.5.Z:java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.aarch64",
"7ComputeNode-7.5.Z:java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.i686",
"7ComputeNode-7.5.Z:java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.ppc64",
"7ComputeNode-7.5.Z:java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7ComputeNode-7.5.Z:java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.x86_64",
"7ComputeNode-7.5.Z:java-1.8.0-openjdk-javadoc-1:1.8.0.181-3.b13.el7_5.noarch",
"7ComputeNode-7.5.Z:java-1.8.0-openjdk-javadoc-debug-1:1.8.0.181-3.b13.el7_5.noarch",
"7ComputeNode-7.5.Z:java-1.8.0-openjdk-javadoc-zip-1:1.8.0.181-3.b13.el7_5.noarch",
"7ComputeNode-7.5.Z:java-1.8.0-openjdk-javadoc-zip-debug-1:1.8.0.181-3.b13.el7_5.noarch",
"7ComputeNode-7.5.Z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.aarch64",
"7ComputeNode-7.5.Z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.i686",
"7ComputeNode-7.5.Z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.ppc64",
"7ComputeNode-7.5.Z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7ComputeNode-7.5.Z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.s390x",
"7ComputeNode-7.5.Z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.x86_64",
"7ComputeNode-7.5.Z:java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.aarch64",
"7ComputeNode-7.5.Z:java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.i686",
"7ComputeNode-7.5.Z:java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.ppc64",
"7ComputeNode-7.5.Z:java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7ComputeNode-7.5.Z:java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.x86_64",
"7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.aarch64",
"7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.i686",
"7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.ppc64",
"7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.s390x",
"7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.src",
"7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.x86_64",
"7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.aarch64",
"7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.i686",
"7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.ppc64",
"7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.s390x",
"7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.x86_64",
"7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.aarch64",
"7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.i686",
"7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.ppc64",
"7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.x86_64",
"7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.aarch64",
"7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.i686",
"7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.ppc64",
"7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.x86_64",
"7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.aarch64",
"7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.i686",
"7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.ppc64",
"7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.s390x",
"7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.x86_64",
"7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.aarch64",
"7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.i686",
"7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.ppc64",
"7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.s390x",
"7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.x86_64",
"7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.aarch64",
"7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.i686",
"7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.ppc64",
"7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.x86_64",
"7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.aarch64",
"7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.i686",
"7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.ppc64",
"7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.s390x",
"7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.x86_64",
"7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.aarch64",
"7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.i686",
"7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.ppc64",
"7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.x86_64",
"7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.aarch64",
"7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.i686",
"7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.ppc64",
"7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.s390x",
"7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.x86_64",
"7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.aarch64",
"7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.i686",
"7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.ppc64",
"7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.x86_64",
"7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-javadoc-1:1.8.0.181-3.b13.el7_5.noarch",
"7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-javadoc-debug-1:1.8.0.181-3.b13.el7_5.noarch",
"7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-javadoc-zip-1:1.8.0.181-3.b13.el7_5.noarch",
"7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-javadoc-zip-debug-1:1.8.0.181-3.b13.el7_5.noarch",
"7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.aarch64",
"7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.i686",
"7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.ppc64",
"7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.s390x",
"7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.x86_64",
"7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.aarch64",
"7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.i686",
"7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.ppc64",
"7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7ComputeNode-optional-7.5.Z:java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Server-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Server-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.i686",
"7Server-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Server-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Server-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.s390x",
"7Server-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.src",
"7Server-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Server-7.5.Z:java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Server-7.5.Z:java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.i686",
"7Server-7.5.Z:java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Server-7.5.Z:java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Server-7.5.Z:java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.s390x",
"7Server-7.5.Z:java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Server-7.5.Z:java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Server-7.5.Z:java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.i686",
"7Server-7.5.Z:java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Server-7.5.Z:java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Server-7.5.Z:java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Server-7.5.Z:java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Server-7.5.Z:java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.i686",
"7Server-7.5.Z:java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Server-7.5.Z:java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Server-7.5.Z:java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Server-7.5.Z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Server-7.5.Z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.i686",
"7Server-7.5.Z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Server-7.5.Z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Server-7.5.Z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.s390x",
"7Server-7.5.Z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Server-7.5.Z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Server-7.5.Z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.i686",
"7Server-7.5.Z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Server-7.5.Z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Server-7.5.Z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.s390x",
"7Server-7.5.Z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Server-7.5.Z:java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Server-7.5.Z:java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.i686",
"7Server-7.5.Z:java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Server-7.5.Z:java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Server-7.5.Z:java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Server-7.5.Z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Server-7.5.Z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.i686",
"7Server-7.5.Z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Server-7.5.Z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Server-7.5.Z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.s390x",
"7Server-7.5.Z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Server-7.5.Z:java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Server-7.5.Z:java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.i686",
"7Server-7.5.Z:java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Server-7.5.Z:java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Server-7.5.Z:java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Server-7.5.Z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Server-7.5.Z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.i686",
"7Server-7.5.Z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Server-7.5.Z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Server-7.5.Z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.s390x",
"7Server-7.5.Z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Server-7.5.Z:java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Server-7.5.Z:java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.i686",
"7Server-7.5.Z:java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Server-7.5.Z:java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Server-7.5.Z:java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Server-7.5.Z:java-1.8.0-openjdk-javadoc-1:1.8.0.181-3.b13.el7_5.noarch",
"7Server-7.5.Z:java-1.8.0-openjdk-javadoc-debug-1:1.8.0.181-3.b13.el7_5.noarch",
"7Server-7.5.Z:java-1.8.0-openjdk-javadoc-zip-1:1.8.0.181-3.b13.el7_5.noarch",
"7Server-7.5.Z:java-1.8.0-openjdk-javadoc-zip-debug-1:1.8.0.181-3.b13.el7_5.noarch",
"7Server-7.5.Z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Server-7.5.Z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.i686",
"7Server-7.5.Z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Server-7.5.Z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Server-7.5.Z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.s390x",
"7Server-7.5.Z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Server-7.5.Z:java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Server-7.5.Z:java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.i686",
"7Server-7.5.Z:java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Server-7.5.Z:java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Server-7.5.Z:java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Server-Alt-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Server-Alt-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.i686",
"7Server-Alt-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Server-Alt-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Server-Alt-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.s390x",
"7Server-Alt-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.src",
"7Server-Alt-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Server-Alt-7.5.Z:java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Server-Alt-7.5.Z:java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.i686",
"7Server-Alt-7.5.Z:java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Server-Alt-7.5.Z:java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Server-Alt-7.5.Z:java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.s390x",
"7Server-Alt-7.5.Z:java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Server-Alt-7.5.Z:java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Server-Alt-7.5.Z:java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.i686",
"7Server-Alt-7.5.Z:java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Server-Alt-7.5.Z:java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Server-Alt-7.5.Z:java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Server-Alt-7.5.Z:java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Server-Alt-7.5.Z:java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.i686",
"7Server-Alt-7.5.Z:java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Server-Alt-7.5.Z:java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Server-Alt-7.5.Z:java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Server-Alt-7.5.Z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Server-Alt-7.5.Z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.i686",
"7Server-Alt-7.5.Z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Server-Alt-7.5.Z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Server-Alt-7.5.Z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.s390x",
"7Server-Alt-7.5.Z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Server-Alt-7.5.Z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Server-Alt-7.5.Z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.i686",
"7Server-Alt-7.5.Z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Server-Alt-7.5.Z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Server-Alt-7.5.Z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.s390x",
"7Server-Alt-7.5.Z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Server-Alt-7.5.Z:java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Server-Alt-7.5.Z:java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.i686",
"7Server-Alt-7.5.Z:java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Server-Alt-7.5.Z:java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Server-Alt-7.5.Z:java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Server-Alt-7.5.Z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Server-Alt-7.5.Z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.i686",
"7Server-Alt-7.5.Z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Server-Alt-7.5.Z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Server-Alt-7.5.Z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.s390x",
"7Server-Alt-7.5.Z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Server-Alt-7.5.Z:java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Server-Alt-7.5.Z:java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.i686",
"7Server-Alt-7.5.Z:java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Server-Alt-7.5.Z:java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Server-Alt-7.5.Z:java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Server-Alt-7.5.Z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Server-Alt-7.5.Z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.i686",
"7Server-Alt-7.5.Z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Server-Alt-7.5.Z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Server-Alt-7.5.Z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.s390x",
"7Server-Alt-7.5.Z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Server-Alt-7.5.Z:java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Server-Alt-7.5.Z:java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.i686",
"7Server-Alt-7.5.Z:java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Server-Alt-7.5.Z:java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Server-Alt-7.5.Z:java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Server-Alt-7.5.Z:java-1.8.0-openjdk-javadoc-1:1.8.0.181-3.b13.el7_5.noarch",
"7Server-Alt-7.5.Z:java-1.8.0-openjdk-javadoc-debug-1:1.8.0.181-3.b13.el7_5.noarch",
"7Server-Alt-7.5.Z:java-1.8.0-openjdk-javadoc-zip-1:1.8.0.181-3.b13.el7_5.noarch",
"7Server-Alt-7.5.Z:java-1.8.0-openjdk-javadoc-zip-debug-1:1.8.0.181-3.b13.el7_5.noarch",
"7Server-Alt-7.5.Z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Server-Alt-7.5.Z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.i686",
"7Server-Alt-7.5.Z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Server-Alt-7.5.Z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Server-Alt-7.5.Z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.s390x",
"7Server-Alt-7.5.Z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Server-Alt-7.5.Z:java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Server-Alt-7.5.Z:java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.i686",
"7Server-Alt-7.5.Z:java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Server-Alt-7.5.Z:java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Server-Alt-7.5.Z:java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Server-optional-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Server-optional-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.i686",
"7Server-optional-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Server-optional-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Server-optional-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.s390x",
"7Server-optional-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.src",
"7Server-optional-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Server-optional-7.5.Z:java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Server-optional-7.5.Z:java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.i686",
"7Server-optional-7.5.Z:java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Server-optional-7.5.Z:java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Server-optional-7.5.Z:java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.s390x",
"7Server-optional-7.5.Z:java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Server-optional-7.5.Z:java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Server-optional-7.5.Z:java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.i686",
"7Server-optional-7.5.Z:java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Server-optional-7.5.Z:java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Server-optional-7.5.Z:java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Server-optional-7.5.Z:java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Server-optional-7.5.Z:java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.i686",
"7Server-optional-7.5.Z:java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Server-optional-7.5.Z:java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Server-optional-7.5.Z:java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Server-optional-7.5.Z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Server-optional-7.5.Z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.i686",
"7Server-optional-7.5.Z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Server-optional-7.5.Z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Server-optional-7.5.Z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.s390x",
"7Server-optional-7.5.Z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Server-optional-7.5.Z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Server-optional-7.5.Z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.i686",
"7Server-optional-7.5.Z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Server-optional-7.5.Z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Server-optional-7.5.Z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.s390x",
"7Server-optional-7.5.Z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Server-optional-7.5.Z:java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Server-optional-7.5.Z:java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.i686",
"7Server-optional-7.5.Z:java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Server-optional-7.5.Z:java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Server-optional-7.5.Z:java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Server-optional-7.5.Z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Server-optional-7.5.Z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.i686",
"7Server-optional-7.5.Z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Server-optional-7.5.Z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Server-optional-7.5.Z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.s390x",
"7Server-optional-7.5.Z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Server-optional-7.5.Z:java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Server-optional-7.5.Z:java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.i686",
"7Server-optional-7.5.Z:java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Server-optional-7.5.Z:java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Server-optional-7.5.Z:java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Server-optional-7.5.Z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Server-optional-7.5.Z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.i686",
"7Server-optional-7.5.Z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Server-optional-7.5.Z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Server-optional-7.5.Z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.s390x",
"7Server-optional-7.5.Z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Server-optional-7.5.Z:java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Server-optional-7.5.Z:java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.i686",
"7Server-optional-7.5.Z:java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Server-optional-7.5.Z:java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Server-optional-7.5.Z:java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Server-optional-7.5.Z:java-1.8.0-openjdk-javadoc-1:1.8.0.181-3.b13.el7_5.noarch",
"7Server-optional-7.5.Z:java-1.8.0-openjdk-javadoc-debug-1:1.8.0.181-3.b13.el7_5.noarch",
"7Server-optional-7.5.Z:java-1.8.0-openjdk-javadoc-zip-1:1.8.0.181-3.b13.el7_5.noarch",
"7Server-optional-7.5.Z:java-1.8.0-openjdk-javadoc-zip-debug-1:1.8.0.181-3.b13.el7_5.noarch",
"7Server-optional-7.5.Z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Server-optional-7.5.Z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.i686",
"7Server-optional-7.5.Z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Server-optional-7.5.Z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Server-optional-7.5.Z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.s390x",
"7Server-optional-7.5.Z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Server-optional-7.5.Z:java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Server-optional-7.5.Z:java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.i686",
"7Server-optional-7.5.Z:java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Server-optional-7.5.Z:java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Server-optional-7.5.Z:java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.i686",
"7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.s390x",
"7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.src",
"7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.i686",
"7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.s390x",
"7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.i686",
"7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.i686",
"7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.i686",
"7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.s390x",
"7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.i686",
"7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.s390x",
"7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.i686",
"7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.i686",
"7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.s390x",
"7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.i686",
"7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.i686",
"7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.s390x",
"7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.i686",
"7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-javadoc-1:1.8.0.181-3.b13.el7_5.noarch",
"7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-javadoc-debug-1:1.8.0.181-3.b13.el7_5.noarch",
"7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-javadoc-zip-1:1.8.0.181-3.b13.el7_5.noarch",
"7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-javadoc-zip-debug-1:1.8.0.181-3.b13.el7_5.noarch",
"7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.i686",
"7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.s390x",
"7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.i686",
"7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Server-optional-Alt-7.5.Z:java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Workstation-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Workstation-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.i686",
"7Workstation-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Workstation-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Workstation-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.s390x",
"7Workstation-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.src",
"7Workstation-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Workstation-7.5.Z:java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Workstation-7.5.Z:java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.i686",
"7Workstation-7.5.Z:java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Workstation-7.5.Z:java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Workstation-7.5.Z:java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.s390x",
"7Workstation-7.5.Z:java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Workstation-7.5.Z:java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Workstation-7.5.Z:java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.i686",
"7Workstation-7.5.Z:java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Workstation-7.5.Z:java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Workstation-7.5.Z:java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Workstation-7.5.Z:java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Workstation-7.5.Z:java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.i686",
"7Workstation-7.5.Z:java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Workstation-7.5.Z:java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Workstation-7.5.Z:java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Workstation-7.5.Z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Workstation-7.5.Z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.i686",
"7Workstation-7.5.Z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Workstation-7.5.Z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Workstation-7.5.Z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.s390x",
"7Workstation-7.5.Z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Workstation-7.5.Z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Workstation-7.5.Z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.i686",
"7Workstation-7.5.Z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Workstation-7.5.Z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Workstation-7.5.Z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.s390x",
"7Workstation-7.5.Z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Workstation-7.5.Z:java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Workstation-7.5.Z:java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.i686",
"7Workstation-7.5.Z:java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Workstation-7.5.Z:java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Workstation-7.5.Z:java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Workstation-7.5.Z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Workstation-7.5.Z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.i686",
"7Workstation-7.5.Z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Workstation-7.5.Z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Workstation-7.5.Z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.s390x",
"7Workstation-7.5.Z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Workstation-7.5.Z:java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Workstation-7.5.Z:java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.i686",
"7Workstation-7.5.Z:java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Workstation-7.5.Z:java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Workstation-7.5.Z:java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Workstation-7.5.Z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Workstation-7.5.Z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.i686",
"7Workstation-7.5.Z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Workstation-7.5.Z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Workstation-7.5.Z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.s390x",
"7Workstation-7.5.Z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Workstation-7.5.Z:java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Workstation-7.5.Z:java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.i686",
"7Workstation-7.5.Z:java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Workstation-7.5.Z:java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Workstation-7.5.Z:java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Workstation-7.5.Z:java-1.8.0-openjdk-javadoc-1:1.8.0.181-3.b13.el7_5.noarch",
"7Workstation-7.5.Z:java-1.8.0-openjdk-javadoc-debug-1:1.8.0.181-3.b13.el7_5.noarch",
"7Workstation-7.5.Z:java-1.8.0-openjdk-javadoc-zip-1:1.8.0.181-3.b13.el7_5.noarch",
"7Workstation-7.5.Z:java-1.8.0-openjdk-javadoc-zip-debug-1:1.8.0.181-3.b13.el7_5.noarch",
"7Workstation-7.5.Z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Workstation-7.5.Z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.i686",
"7Workstation-7.5.Z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Workstation-7.5.Z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Workstation-7.5.Z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.s390x",
"7Workstation-7.5.Z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Workstation-7.5.Z:java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Workstation-7.5.Z:java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.i686",
"7Workstation-7.5.Z:java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Workstation-7.5.Z:java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Workstation-7.5.Z:java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Workstation-optional-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Workstation-optional-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.i686",
"7Workstation-optional-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Workstation-optional-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Workstation-optional-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.s390x",
"7Workstation-optional-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.src",
"7Workstation-optional-7.5.Z:java-1.8.0-openjdk-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Workstation-optional-7.5.Z:java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Workstation-optional-7.5.Z:java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.i686",
"7Workstation-optional-7.5.Z:java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Workstation-optional-7.5.Z:java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Workstation-optional-7.5.Z:java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.s390x",
"7Workstation-optional-7.5.Z:java-1.8.0-openjdk-accessibility-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Workstation-optional-7.5.Z:java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Workstation-optional-7.5.Z:java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.i686",
"7Workstation-optional-7.5.Z:java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Workstation-optional-7.5.Z:java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Workstation-optional-7.5.Z:java-1.8.0-openjdk-accessibility-debug-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Workstation-optional-7.5.Z:java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Workstation-optional-7.5.Z:java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.i686",
"7Workstation-optional-7.5.Z:java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Workstation-optional-7.5.Z:java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Workstation-optional-7.5.Z:java-1.8.0-openjdk-debug-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Workstation-optional-7.5.Z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Workstation-optional-7.5.Z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.i686",
"7Workstation-optional-7.5.Z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Workstation-optional-7.5.Z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Workstation-optional-7.5.Z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.s390x",
"7Workstation-optional-7.5.Z:java-1.8.0-openjdk-debuginfo-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Workstation-optional-7.5.Z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Workstation-optional-7.5.Z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.i686",
"7Workstation-optional-7.5.Z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Workstation-optional-7.5.Z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Workstation-optional-7.5.Z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.s390x",
"7Workstation-optional-7.5.Z:java-1.8.0-openjdk-demo-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Workstation-optional-7.5.Z:java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Workstation-optional-7.5.Z:java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.i686",
"7Workstation-optional-7.5.Z:java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Workstation-optional-7.5.Z:java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Workstation-optional-7.5.Z:java-1.8.0-openjdk-demo-debug-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Workstation-optional-7.5.Z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Workstation-optional-7.5.Z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.i686",
"7Workstation-optional-7.5.Z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Workstation-optional-7.5.Z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Workstation-optional-7.5.Z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.s390x",
"7Workstation-optional-7.5.Z:java-1.8.0-openjdk-devel-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Workstation-optional-7.5.Z:java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Workstation-optional-7.5.Z:java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.i686",
"7Workstation-optional-7.5.Z:java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Workstation-optional-7.5.Z:java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Workstation-optional-7.5.Z:java-1.8.0-openjdk-devel-debug-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Workstation-optional-7.5.Z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Workstation-optional-7.5.Z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.i686",
"7Workstation-optional-7.5.Z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Workstation-optional-7.5.Z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Workstation-optional-7.5.Z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.s390x",
"7Workstation-optional-7.5.Z:java-1.8.0-openjdk-headless-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Workstation-optional-7.5.Z:java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Workstation-optional-7.5.Z:java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.i686",
"7Workstation-optional-7.5.Z:java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Workstation-optional-7.5.Z:java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Workstation-optional-7.5.Z:java-1.8.0-openjdk-headless-debug-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Workstation-optional-7.5.Z:java-1.8.0-openjdk-javadoc-1:1.8.0.181-3.b13.el7_5.noarch",
"7Workstation-optional-7.5.Z:java-1.8.0-openjdk-javadoc-debug-1:1.8.0.181-3.b13.el7_5.noarch",
"7Workstation-optional-7.5.Z:java-1.8.0-openjdk-javadoc-zip-1:1.8.0.181-3.b13.el7_5.noarch",
"7Workstation-optional-7.5.Z:java-1.8.0-openjdk-javadoc-zip-debug-1:1.8.0.181-3.b13.el7_5.noarch",
"7Workstation-optional-7.5.Z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Workstation-optional-7.5.Z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.i686",
"7Workstation-optional-7.5.Z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Workstation-optional-7.5.Z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Workstation-optional-7.5.Z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.s390x",
"7Workstation-optional-7.5.Z:java-1.8.0-openjdk-src-1:1.8.0.181-3.b13.el7_5.x86_64",
"7Workstation-optional-7.5.Z:java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.aarch64",
"7Workstation-optional-7.5.Z:java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.i686",
"7Workstation-optional-7.5.Z:java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.ppc64",
"7Workstation-optional-7.5.Z:java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.ppc64le",
"7Workstation-optional-7.5.Z:java-1.8.0-openjdk-src-debug-1:1.8.0.181-3.b13.el7_5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "OpenJDK: insufficient index validation in PatternSyntaxException getMessage() (Concurrency, 8199547)"
}
]
}
rhsa-2018:2568
Vulnerability from csaf_redhat
Published
2018-08-27 14:20
Modified
2025-08-04 11:58
Summary
Red Hat Security Advisory: java-1.8.0-ibm security update
Notes
Topic
An update for java-1.8.0-ibm is now available for Red Hat Enterprise Linux 7 Supplementary.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
IBM Java SE version 8 includes the IBM Java Runtime Environment and the IBM Java Software Development Kit.
This update upgrades IBM Java SE 8 to version 8 SR5-FP20.
Security Fix(es):
* IBM JDK: privilege escalation via insufficiently restricted access to Attach API (CVE-2018-12539)
* openssl: BN_mod_exp may produce incorrect results on x86_64 (CVE-2017-3732)
* openssl: bn_sqrx8x_internal carry bug on x86_64 (CVE-2017-3736)
* IBM JDK: DoS in the java.math component (CVE-2018-1517)
* IBM JDK: path traversal flaw in the Diagnostic Tooling Framework (CVE-2018-1656)
* Oracle JDK: unspecified vulnerability fixed in 6u201, 7u191, 8u181, and 10.0.2 (Libraries) (CVE-2018-2940)
* OpenJDK: insufficient index validation in PatternSyntaxException getMessage() (Concurrency, 8199547) (CVE-2018-2952)
* Oracle JDK: unspecified vulnerability fixed in 6u201, 7u191, 8u181, and 10.0.2 (JSSE) (CVE-2018-2973)
* OpenSSL: Double-free in DSA code (CVE-2016-0705)
For more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section.
Red Hat would like to thank the OpenSSL project for reporting CVE-2016-0705. Upstream acknowledges Adam Langley (Google/BoringSSL) as the original reporter of CVE-2016-0705.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for java-1.8.0-ibm is now available for Red Hat Enterprise Linux 7 Supplementary.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "IBM Java SE version 8 includes the IBM Java Runtime Environment and the IBM Java Software Development Kit.\n\nThis update upgrades IBM Java SE 8 to version 8 SR5-FP20.\n\nSecurity Fix(es):\n\n* IBM JDK: privilege escalation via insufficiently restricted access to Attach API (CVE-2018-12539)\n\n* openssl: BN_mod_exp may produce incorrect results on x86_64 (CVE-2017-3732)\n\n* openssl: bn_sqrx8x_internal carry bug on x86_64 (CVE-2017-3736)\n\n* IBM JDK: DoS in the java.math component (CVE-2018-1517)\n\n* IBM JDK: path traversal flaw in the Diagnostic Tooling Framework (CVE-2018-1656)\n\n* Oracle JDK: unspecified vulnerability fixed in 6u201, 7u191, 8u181, and 10.0.2 (Libraries) (CVE-2018-2940)\n\n* OpenJDK: insufficient index validation in PatternSyntaxException getMessage() (Concurrency, 8199547) (CVE-2018-2952)\n\n* Oracle JDK: unspecified vulnerability fixed in 6u201, 7u191, 8u181, and 10.0.2 (JSSE) (CVE-2018-2973)\n\n* OpenSSL: Double-free in DSA code (CVE-2016-0705)\n\nFor more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section.\n\nRed Hat would like to thank the OpenSSL project for reporting CVE-2016-0705. Upstream acknowledges Adam Langley (Google/BoringSSL) as the original reporter of CVE-2016-0705.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2018:2568",
"url": "https://access.redhat.com/errata/RHSA-2018:2568"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "1310596",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1310596"
},
{
"category": "external",
"summary": "1416856",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1416856"
},
{
"category": "external",
"summary": "1509169",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1509169"
},
{
"category": "external",
"summary": "1600925",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1600925"
},
{
"category": "external",
"summary": "1602145",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1602145"
},
{
"category": "external",
"summary": "1602146",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1602146"
},
{
"category": "external",
"summary": "1618767",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1618767"
},
{
"category": "external",
"summary": "1618869",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1618869"
},
{
"category": "external",
"summary": "1618871",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1618871"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_2568.json"
}
],
"title": "Red Hat Security Advisory: java-1.8.0-ibm security update",
"tracking": {
"current_release_date": "2025-08-04T11:58:32+00:00",
"generator": {
"date": "2025-08-04T11:58:32+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.6.6"
}
},
"id": "RHSA-2018:2568",
"initial_release_date": "2018-08-27T14:20:44+00:00",
"revision_history": [
{
"date": "2018-08-27T14:20:44+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2018-08-27T14:20:44+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2025-08-04T11:58:32+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Client Supplementary (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux Client Supplementary (v. 7)",
"product_id": "7Client-7.5.Z-Client",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras:7"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)",
"product_id": "7ComputeNode-7.5.Z-ComputeNode",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras:7"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Server Supplementary (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux Server Supplementary (v. 7)",
"product_id": "7Server-7.5.Z-Server",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras:7"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Workstation Supplementary (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux Workstation Supplementary (v. 7)",
"product_id": "7Workstation-7.5.Z-Workstation",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras:7"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux Supplementary"
},
{
"branches": [
{
"category": "product_version",
"name": "java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"product": {
"name": "java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"product_id": "java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-ibm-src@1.8.0.5.20-1jpp.1.el7?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"product": {
"name": "java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"product_id": "java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-ibm@1.8.0.5.20-1jpp.1.el7?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"product": {
"name": "java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"product_id": "java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-ibm-devel@1.8.0.5.20-1jpp.1.el7?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"product": {
"name": "java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"product_id": "java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-ibm-demo@1.8.0.5.20-1jpp.1.el7?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"product": {
"name": "java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"product_id": "java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-ibm-plugin@1.8.0.5.20-1jpp.1.el7?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"product": {
"name": "java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"product_id": "java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-ibm-jdbc@1.8.0.5.20-1jpp.1.el7?arch=x86_64\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"product": {
"name": "java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"product_id": "java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-ibm-plugin@1.8.0.5.20-1jpp.1.el7?arch=ppc64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"product": {
"name": "java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"product_id": "java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-ibm@1.8.0.5.20-1jpp.1.el7?arch=ppc64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"product": {
"name": "java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"product_id": "java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-ibm-jdbc@1.8.0.5.20-1jpp.1.el7?arch=ppc64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"product": {
"name": "java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"product_id": "java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-ibm-src@1.8.0.5.20-1jpp.1.el7?arch=ppc64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"product": {
"name": "java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"product_id": "java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-ibm-devel@1.8.0.5.20-1jpp.1.el7?arch=ppc64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"product": {
"name": "java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"product_id": "java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-ibm-demo@1.8.0.5.20-1jpp.1.el7?arch=ppc64\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "ppc64"
},
{
"branches": [
{
"category": "product_version",
"name": "java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.s390x",
"product": {
"name": "java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.s390x",
"product_id": "java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-ibm@1.8.0.5.20-1jpp.1.el7?arch=s390x\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.s390x",
"product": {
"name": "java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.s390x",
"product_id": "java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-ibm-jdbc@1.8.0.5.20-1jpp.1.el7?arch=s390x\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.s390x",
"product": {
"name": "java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.s390x",
"product_id": "java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-ibm-src@1.8.0.5.20-1jpp.1.el7?arch=s390x\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.s390x",
"product": {
"name": "java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.s390x",
"product_id": "java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-ibm-devel@1.8.0.5.20-1jpp.1.el7?arch=s390x\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.s390x",
"product": {
"name": "java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.s390x",
"product_id": "java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-ibm-demo@1.8.0.5.20-1jpp.1.el7?arch=s390x\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"product": {
"name": "java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"product_id": "java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-ibm@1.8.0.5.20-1jpp.1.el7?arch=ppc64le\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"product": {
"name": "java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"product_id": "java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-ibm-jdbc@1.8.0.5.20-1jpp.1.el7?arch=ppc64le\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"product": {
"name": "java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"product_id": "java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-ibm-src@1.8.0.5.20-1jpp.1.el7?arch=ppc64le\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"product": {
"name": "java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"product_id": "java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-ibm-devel@1.8.0.5.20-1jpp.1.el7?arch=ppc64le\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"product": {
"name": "java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"product_id": "java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-ibm-demo@1.8.0.5.20-1jpp.1.el7?arch=ppc64le\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64 as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)",
"product_id": "7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64"
},
"product_reference": "java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"relates_to_product_reference": "7Client-7.5.Z-Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64le as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)",
"product_id": "7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64le"
},
"product_reference": "java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"relates_to_product_reference": "7Client-7.5.Z-Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.s390x as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)",
"product_id": "7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.s390x"
},
"product_reference": "java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.s390x",
"relates_to_product_reference": "7Client-7.5.Z-Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.x86_64 as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)",
"product_id": "7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.x86_64"
},
"product_reference": "java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"relates_to_product_reference": "7Client-7.5.Z-Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64 as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)",
"product_id": "7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64"
},
"product_reference": "java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"relates_to_product_reference": "7Client-7.5.Z-Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64le as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)",
"product_id": "7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64le"
},
"product_reference": "java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"relates_to_product_reference": "7Client-7.5.Z-Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.s390x as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)",
"product_id": "7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.s390x"
},
"product_reference": "java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.s390x",
"relates_to_product_reference": "7Client-7.5.Z-Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.x86_64 as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)",
"product_id": "7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.x86_64"
},
"product_reference": "java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"relates_to_product_reference": "7Client-7.5.Z-Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64 as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)",
"product_id": "7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64"
},
"product_reference": "java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"relates_to_product_reference": "7Client-7.5.Z-Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64le as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)",
"product_id": "7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64le"
},
"product_reference": "java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"relates_to_product_reference": "7Client-7.5.Z-Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.s390x as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)",
"product_id": "7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.s390x"
},
"product_reference": "java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.s390x",
"relates_to_product_reference": "7Client-7.5.Z-Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.x86_64 as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)",
"product_id": "7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.x86_64"
},
"product_reference": "java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"relates_to_product_reference": "7Client-7.5.Z-Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64 as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)",
"product_id": "7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64"
},
"product_reference": "java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"relates_to_product_reference": "7Client-7.5.Z-Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64le as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)",
"product_id": "7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64le"
},
"product_reference": "java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"relates_to_product_reference": "7Client-7.5.Z-Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.s390x as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)",
"product_id": "7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.s390x"
},
"product_reference": "java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.s390x",
"relates_to_product_reference": "7Client-7.5.Z-Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.x86_64 as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)",
"product_id": "7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.x86_64"
},
"product_reference": "java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"relates_to_product_reference": "7Client-7.5.Z-Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.ppc64 as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)",
"product_id": "7Client-7.5.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.ppc64"
},
"product_reference": "java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"relates_to_product_reference": "7Client-7.5.Z-Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.x86_64 as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)",
"product_id": "7Client-7.5.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.x86_64"
},
"product_reference": "java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"relates_to_product_reference": "7Client-7.5.Z-Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64 as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)",
"product_id": "7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64"
},
"product_reference": "java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"relates_to_product_reference": "7Client-7.5.Z-Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64le as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)",
"product_id": "7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64le"
},
"product_reference": "java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"relates_to_product_reference": "7Client-7.5.Z-Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.s390x as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)",
"product_id": "7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.s390x"
},
"product_reference": "java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.s390x",
"relates_to_product_reference": "7Client-7.5.Z-Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.x86_64 as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)",
"product_id": "7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.x86_64"
},
"product_reference": "java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"relates_to_product_reference": "7Client-7.5.Z-Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64 as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)",
"product_id": "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64"
},
"product_reference": "java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"relates_to_product_reference": "7ComputeNode-7.5.Z-ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64le as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)",
"product_id": "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64le"
},
"product_reference": "java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"relates_to_product_reference": "7ComputeNode-7.5.Z-ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.s390x as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)",
"product_id": "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.s390x"
},
"product_reference": "java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.s390x",
"relates_to_product_reference": "7ComputeNode-7.5.Z-ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)",
"product_id": "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.x86_64"
},
"product_reference": "java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"relates_to_product_reference": "7ComputeNode-7.5.Z-ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64 as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)",
"product_id": "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64"
},
"product_reference": "java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"relates_to_product_reference": "7ComputeNode-7.5.Z-ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64le as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)",
"product_id": "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64le"
},
"product_reference": "java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"relates_to_product_reference": "7ComputeNode-7.5.Z-ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.s390x as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)",
"product_id": "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.s390x"
},
"product_reference": "java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.s390x",
"relates_to_product_reference": "7ComputeNode-7.5.Z-ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)",
"product_id": "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.x86_64"
},
"product_reference": "java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"relates_to_product_reference": "7ComputeNode-7.5.Z-ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64 as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)",
"product_id": "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64"
},
"product_reference": "java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"relates_to_product_reference": "7ComputeNode-7.5.Z-ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64le as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)",
"product_id": "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64le"
},
"product_reference": "java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"relates_to_product_reference": "7ComputeNode-7.5.Z-ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.s390x as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)",
"product_id": "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.s390x"
},
"product_reference": "java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.s390x",
"relates_to_product_reference": "7ComputeNode-7.5.Z-ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)",
"product_id": "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.x86_64"
},
"product_reference": "java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"relates_to_product_reference": "7ComputeNode-7.5.Z-ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64 as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)",
"product_id": "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64"
},
"product_reference": "java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"relates_to_product_reference": "7ComputeNode-7.5.Z-ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64le as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)",
"product_id": "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64le"
},
"product_reference": "java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"relates_to_product_reference": "7ComputeNode-7.5.Z-ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.s390x as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)",
"product_id": "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.s390x"
},
"product_reference": "java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.s390x",
"relates_to_product_reference": "7ComputeNode-7.5.Z-ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)",
"product_id": "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.x86_64"
},
"product_reference": "java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"relates_to_product_reference": "7ComputeNode-7.5.Z-ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.ppc64 as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)",
"product_id": "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.ppc64"
},
"product_reference": "java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"relates_to_product_reference": "7ComputeNode-7.5.Z-ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)",
"product_id": "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.x86_64"
},
"product_reference": "java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"relates_to_product_reference": "7ComputeNode-7.5.Z-ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64 as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)",
"product_id": "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64"
},
"product_reference": "java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"relates_to_product_reference": "7ComputeNode-7.5.Z-ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64le as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)",
"product_id": "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64le"
},
"product_reference": "java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"relates_to_product_reference": "7ComputeNode-7.5.Z-ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.s390x as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)",
"product_id": "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.s390x"
},
"product_reference": "java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.s390x",
"relates_to_product_reference": "7ComputeNode-7.5.Z-ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)",
"product_id": "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.x86_64"
},
"product_reference": "java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"relates_to_product_reference": "7ComputeNode-7.5.Z-ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)",
"product_id": "7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64"
},
"product_reference": "java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"relates_to_product_reference": "7Server-7.5.Z-Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64le as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)",
"product_id": "7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64le"
},
"product_reference": "java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"relates_to_product_reference": "7Server-7.5.Z-Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.s390x as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)",
"product_id": "7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.s390x"
},
"product_reference": "java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.s390x",
"relates_to_product_reference": "7Server-7.5.Z-Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)",
"product_id": "7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.x86_64"
},
"product_reference": "java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"relates_to_product_reference": "7Server-7.5.Z-Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)",
"product_id": "7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64"
},
"product_reference": "java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"relates_to_product_reference": "7Server-7.5.Z-Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64le as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)",
"product_id": "7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64le"
},
"product_reference": "java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"relates_to_product_reference": "7Server-7.5.Z-Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.s390x as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)",
"product_id": "7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.s390x"
},
"product_reference": "java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.s390x",
"relates_to_product_reference": "7Server-7.5.Z-Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)",
"product_id": "7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.x86_64"
},
"product_reference": "java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"relates_to_product_reference": "7Server-7.5.Z-Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)",
"product_id": "7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64"
},
"product_reference": "java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"relates_to_product_reference": "7Server-7.5.Z-Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64le as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)",
"product_id": "7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64le"
},
"product_reference": "java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"relates_to_product_reference": "7Server-7.5.Z-Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.s390x as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)",
"product_id": "7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.s390x"
},
"product_reference": "java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.s390x",
"relates_to_product_reference": "7Server-7.5.Z-Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)",
"product_id": "7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.x86_64"
},
"product_reference": "java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"relates_to_product_reference": "7Server-7.5.Z-Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)",
"product_id": "7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64"
},
"product_reference": "java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"relates_to_product_reference": "7Server-7.5.Z-Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64le as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)",
"product_id": "7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64le"
},
"product_reference": "java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"relates_to_product_reference": "7Server-7.5.Z-Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.s390x as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)",
"product_id": "7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.s390x"
},
"product_reference": "java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.s390x",
"relates_to_product_reference": "7Server-7.5.Z-Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)",
"product_id": "7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.x86_64"
},
"product_reference": "java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"relates_to_product_reference": "7Server-7.5.Z-Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.ppc64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)",
"product_id": "7Server-7.5.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.ppc64"
},
"product_reference": "java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"relates_to_product_reference": "7Server-7.5.Z-Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)",
"product_id": "7Server-7.5.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.x86_64"
},
"product_reference": "java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"relates_to_product_reference": "7Server-7.5.Z-Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)",
"product_id": "7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64"
},
"product_reference": "java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"relates_to_product_reference": "7Server-7.5.Z-Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64le as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)",
"product_id": "7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64le"
},
"product_reference": "java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"relates_to_product_reference": "7Server-7.5.Z-Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.s390x as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)",
"product_id": "7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.s390x"
},
"product_reference": "java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.s390x",
"relates_to_product_reference": "7Server-7.5.Z-Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)",
"product_id": "7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.x86_64"
},
"product_reference": "java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"relates_to_product_reference": "7Server-7.5.Z-Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)",
"product_id": "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64"
},
"product_reference": "java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"relates_to_product_reference": "7Workstation-7.5.Z-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64le as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)",
"product_id": "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64le"
},
"product_reference": "java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"relates_to_product_reference": "7Workstation-7.5.Z-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.s390x as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)",
"product_id": "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.s390x"
},
"product_reference": "java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.s390x",
"relates_to_product_reference": "7Workstation-7.5.Z-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)",
"product_id": "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.x86_64"
},
"product_reference": "java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"relates_to_product_reference": "7Workstation-7.5.Z-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)",
"product_id": "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64"
},
"product_reference": "java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"relates_to_product_reference": "7Workstation-7.5.Z-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64le as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)",
"product_id": "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64le"
},
"product_reference": "java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"relates_to_product_reference": "7Workstation-7.5.Z-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.s390x as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)",
"product_id": "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.s390x"
},
"product_reference": "java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.s390x",
"relates_to_product_reference": "7Workstation-7.5.Z-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)",
"product_id": "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.x86_64"
},
"product_reference": "java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"relates_to_product_reference": "7Workstation-7.5.Z-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)",
"product_id": "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64"
},
"product_reference": "java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"relates_to_product_reference": "7Workstation-7.5.Z-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64le as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)",
"product_id": "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64le"
},
"product_reference": "java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"relates_to_product_reference": "7Workstation-7.5.Z-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.s390x as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)",
"product_id": "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.s390x"
},
"product_reference": "java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.s390x",
"relates_to_product_reference": "7Workstation-7.5.Z-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)",
"product_id": "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.x86_64"
},
"product_reference": "java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"relates_to_product_reference": "7Workstation-7.5.Z-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)",
"product_id": "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64"
},
"product_reference": "java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"relates_to_product_reference": "7Workstation-7.5.Z-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64le as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)",
"product_id": "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64le"
},
"product_reference": "java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"relates_to_product_reference": "7Workstation-7.5.Z-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.s390x as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)",
"product_id": "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.s390x"
},
"product_reference": "java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.s390x",
"relates_to_product_reference": "7Workstation-7.5.Z-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)",
"product_id": "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.x86_64"
},
"product_reference": "java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"relates_to_product_reference": "7Workstation-7.5.Z-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.ppc64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)",
"product_id": "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.ppc64"
},
"product_reference": "java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"relates_to_product_reference": "7Workstation-7.5.Z-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)",
"product_id": "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.x86_64"
},
"product_reference": "java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"relates_to_product_reference": "7Workstation-7.5.Z-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)",
"product_id": "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64"
},
"product_reference": "java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"relates_to_product_reference": "7Workstation-7.5.Z-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64le as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)",
"product_id": "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64le"
},
"product_reference": "java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"relates_to_product_reference": "7Workstation-7.5.Z-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.s390x as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)",
"product_id": "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.s390x"
},
"product_reference": "java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.s390x",
"relates_to_product_reference": "7Workstation-7.5.Z-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)",
"product_id": "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.x86_64"
},
"product_reference": "java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"relates_to_product_reference": "7Workstation-7.5.Z-Workstation"
}
]
},
"vulnerabilities": [
{
"acknowledgments": [
{
"names": [
"the OpenSSL project"
]
},
{
"names": [
"Adam Langley"
],
"organization": "Google/BoringSSL",
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2016-0705",
"discovery_date": "2016-02-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1310596"
}
],
"notes": [
{
"category": "description",
"text": "A double-free flaw was found in the way OpenSSL parsed certain malformed DSA (Digital Signature Algorithm) private keys. An attacker could create specially crafted DSA private keys that, when processed by an application compiled against OpenSSL, could cause the application to crash.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenSSL: Double-free in DSA code",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-0705"
},
{
"category": "external",
"summary": "RHBZ#1310596",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1310596"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-0705",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-0705"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-0705",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-0705"
}
],
"release_date": "2016-02-18T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-08-27T14:20:44+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of IBM Java must be restarted for this update to take effect.",
"product_ids": [
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:2568"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "HIGH",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 2.6,
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:H/Au:N/C:N/I:N/A:P",
"version": "2.0"
},
"products": [
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "OpenSSL: Double-free in DSA code"
},
{
"cve": "CVE-2017-3732",
"discovery_date": "2017-01-26T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1416856"
}
],
"notes": [
{
"category": "description",
"text": "There is a carry propagating bug in the x86_64 Montgomery squaring procedure in OpenSSL 1.0.2 before 1.0.2k and 1.1.0 before 1.1.0d. No EC algorithms are affected. Analysis suggests that attacks against RSA and DSA as a result of this defect would be very difficult to perform and are not believed likely. Attacks against DH are considered just feasible (although very difficult) because most of the work necessary to deduce information about a private key may be performed offline. The amount of resources required for such an attack would be very significant and likely only accessible to a limited number of attackers. An attacker would additionally need online access to an unpatched system using the target private key in a scenario with persistent DH parameters and a private key that is shared between multiple clients. For example this can occur by default in OpenSSL DHE based SSL/TLS ciphersuites. Note: This issue is very similar to CVE-2015-3193 but must be treated as a separate problem.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "openssl: BN_mod_exp may produce incorrect results on x86_64",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2017-3732"
},
{
"category": "external",
"summary": "RHBZ#1416856",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1416856"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2017-3732",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-3732"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-3732",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2017-3732"
},
{
"category": "external",
"summary": "https://www.openssl.org/news/secadv/20170126.txt",
"url": "https://www.openssl.org/news/secadv/20170126.txt"
}
],
"release_date": "2017-01-26T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-08-27T14:20:44+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of IBM Java must be restarted for this update to take effect.",
"product_ids": [
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:2568"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "openssl: BN_mod_exp may produce incorrect results on x86_64"
},
{
"cve": "CVE-2017-3736",
"cwe": {
"id": "CWE-682",
"name": "Incorrect Calculation"
},
"discovery_date": "2017-11-02T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1509169"
}
],
"notes": [
{
"category": "description",
"text": "There is a carry propagating bug in the x86_64 Montgomery squaring procedure in OpenSSL before 1.0.2m and 1.1.0 before 1.1.0g. No EC algorithms are affected. Analysis suggests that attacks against RSA and DSA as a result of this defect would be very difficult to perform and are not believed likely. Attacks against DH are considered just feasible (although very difficult) because most of the work necessary to deduce information about a private key may be performed offline. The amount of resources required for such an attack would be very significant and likely only accessible to a limited number of attackers. An attacker would additionally need online access to an unpatched system using the target private key in a scenario with persistent DH parameters and a private key that is shared between multiple clients. This only affects processors that support the BMI1, BMI2 and ADX extensions like Intel Broadwell (5th generation) and later or AMD Ryzen.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "openssl: bn_sqrx8x_internal carry bug on x86_64",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2017-3736"
},
{
"category": "external",
"summary": "RHBZ#1509169",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1509169"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2017-3736",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-3736"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-3736",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2017-3736"
},
{
"category": "external",
"summary": "https://www.openssl.org/news/secadv/20171102.txt",
"url": "https://www.openssl.org/news/secadv/20171102.txt"
}
],
"release_date": "2017-11-02T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-08-27T14:20:44+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of IBM Java must be restarted for this update to take effect.",
"product_ids": [
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:2568"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "openssl: bn_sqrx8x_internal carry bug on x86_64"
},
{
"cve": "CVE-2018-1517",
"discovery_date": "2018-08-16T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1618871"
}
],
"notes": [
{
"category": "description",
"text": "A flaw in the java.math component in IBM SDK, Java Technology Edition 6.0, 7.0, and 8.0 may allow an attacker to inflict a denial-of-service attack with specially crafted String data. IBM X-Force ID: 141681.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "JDK: DoS in the java.math component",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-1517"
},
{
"category": "external",
"summary": "RHBZ#1618871",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1618871"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-1517",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-1517"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-1517",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-1517"
}
],
"release_date": "2018-08-16T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-08-27T14:20:44+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of IBM Java must be restarted for this update to take effect.",
"product_ids": [
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:2568"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "JDK: DoS in the java.math component"
},
{
"cve": "CVE-2018-1656",
"cwe": {
"id": "CWE-22",
"name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)"
},
"discovery_date": "2018-08-16T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1618869"
}
],
"notes": [
{
"category": "description",
"text": "The IBM Java Runtime Environment\u0027s Diagnostic Tooling Framework for Java (DTFJ) (IBM SDK, Java Technology Edition 6.0 , 7.0, and 8.0) does not protect against path traversal attacks when extracting compressed dump files. IBM X-Force ID: 144882.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "JDK: path traversal flaw in the Diagnostic Tooling Framework",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-1656"
},
{
"category": "external",
"summary": "RHBZ#1618869",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1618869"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-1656",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-1656"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-1656",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-1656"
}
],
"release_date": "2018-08-16T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-08-27T14:20:44+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of IBM Java must be restarted for this update to take effect.",
"product_ids": [
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:2568"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.0"
},
"products": [
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "JDK: path traversal flaw in the Diagnostic Tooling Framework"
},
{
"cve": "CVE-2018-2940",
"discovery_date": "2018-07-17T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1602146"
}
],
"notes": [
{
"category": "description",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries). Supported versions that are affected are Java SE: 6u191, 7u181, 8u172 and 10.0.1; Java SE Embedded: 8u171. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 4.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "JDK: unspecified vulnerability fixed in 6u201, 7u191, 8u181, and 10.0.2 (Libraries)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-2940"
},
{
"category": "external",
"summary": "RHBZ#1602146",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1602146"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-2940",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-2940"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2940",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2940"
},
{
"category": "external",
"summary": "http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html#AppendixJAVA",
"url": "http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html#AppendixJAVA"
}
],
"release_date": "2018-07-17T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-08-27T14:20:44+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of IBM Java must be restarted for this update to take effect.",
"product_ids": [
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:2568"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "JDK: unspecified vulnerability fixed in 6u201, 7u191, 8u181, and 10.0.2 (Libraries)"
},
{
"cve": "CVE-2018-2952",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2018-07-11T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1600925"
}
],
"notes": [
{
"category": "description",
"text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Concurrency). Supported versions that are affected are Java SE: 6u191, 7u181, 8u172 and 10.0.1; Java SE Embedded: 8u171; JRockit: R28.3.18. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 3.7 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK: insufficient index validation in PatternSyntaxException getMessage() (Concurrency, 8199547)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-2952"
},
{
"category": "external",
"summary": "RHBZ#1600925",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1600925"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-2952",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-2952"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2952",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2952"
}
],
"release_date": "2018-07-17T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-08-27T14:20:44+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of IBM Java must be restarted for this update to take effect.",
"product_ids": [
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:2568"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 3.7,
"baseSeverity": "LOW",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "OpenJDK: insufficient index validation in PatternSyntaxException getMessage() (Concurrency, 8199547)"
},
{
"cve": "CVE-2018-2973",
"discovery_date": "2018-07-17T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1602145"
}
],
"notes": [
{
"category": "description",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: JSSE). Supported versions that are affected are Java SE: 6u191, 7u181, 8u172 and 10.0.1; Java SE Embedded: 8u171. Difficult to exploit vulnerability allows unauthenticated attacker with network access via SSL/TLS to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 5.9 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "JDK: unspecified vulnerability fixed in 6u201, 7u191, 8u181, and 10.0.2 (JSSE)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-2973"
},
{
"category": "external",
"summary": "RHBZ#1602145",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1602145"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-2973",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-2973"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2973",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2973"
},
{
"category": "external",
"summary": "http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html#AppendixJAVA",
"url": "http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html#AppendixJAVA"
}
],
"release_date": "2018-07-17T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-08-27T14:20:44+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of IBM Java must be restarted for this update to take effect.",
"product_ids": [
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:2568"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.0"
},
"products": [
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "JDK: unspecified vulnerability fixed in 6u201, 7u191, 8u181, and 10.0.2 (JSSE)"
},
{
"cve": "CVE-2018-12539",
"cwe": {
"id": "CWE-287",
"name": "Improper Authentication"
},
"discovery_date": "2018-08-16T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1618767"
}
],
"notes": [
{
"category": "description",
"text": "In Eclipse OpenJ9 version 0.8, users other than the process owner may be able to use Java Attach API to connect to an Eclipse OpenJ9 or IBM JVM on the same machine and use Attach API operations, which includes the ability to execute untrusted native code. Attach API is enabled by default on Windows, Linux and AIX JVMs and can be disabled using the command line option -Dcom.ibm.tools.attach.enable=no.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "JDK: privilege escalation via insufficiently restricted access to Attach API",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-12539"
},
{
"category": "external",
"summary": "RHBZ#1618767",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1618767"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-12539",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-12539"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-12539",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-12539"
}
],
"release_date": "2018-05-11T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-08-27T14:20:44+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of IBM Java must be restarted for this update to take effect.",
"product_ids": [
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:2568"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 8.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "JDK: privilege escalation via insufficiently restricted access to Attach API"
}
]
}
rhsa-2018:2283
Vulnerability from csaf_redhat
Published
2018-07-30 17:50
Modified
2025-08-03 18:29
Summary
Red Hat Security Advisory: java-1.7.0-openjdk security update
Notes
Topic
An update for java-1.7.0-openjdk is now available for Red Hat Enterprise Linux 6.
Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
The java-1.7.0-openjdk packages provide the OpenJDK 7 Java Runtime Environment and the OpenJDK 7 Java Software Development Kit.
Security Fix(es):
* OpenJDK: insufficient index validation in PatternSyntaxException getMessage() (Concurrency, 8199547) (CVE-2018-2952)
For more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for java-1.7.0-openjdk is now available for Red Hat Enterprise Linux 6.\n\nRed Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "The java-1.7.0-openjdk packages provide the OpenJDK 7 Java Runtime Environment and the OpenJDK 7 Java Software Development Kit.\n\nSecurity Fix(es):\n\n* OpenJDK: insufficient index validation in PatternSyntaxException getMessage() (Concurrency, 8199547) (CVE-2018-2952)\n\nFor more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2018:2283",
"url": "https://access.redhat.com/errata/RHSA-2018:2283"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#moderate",
"url": "https://access.redhat.com/security/updates/classification/#moderate"
},
{
"category": "external",
"summary": "1600925",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1600925"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_2283.json"
}
],
"title": "Red Hat Security Advisory: java-1.7.0-openjdk security update",
"tracking": {
"current_release_date": "2025-08-03T18:29:03+00:00",
"generator": {
"date": "2025-08-03T18:29:03+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.6.6"
}
},
"id": "RHSA-2018:2283",
"initial_release_date": "2018-07-30T17:50:09+00:00",
"revision_history": [
{
"date": "2018-07-30T17:50:09+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2018-07-30T17:50:09+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2025-08-03T18:29:03+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Desktop (v. 6)",
"product": {
"name": "Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client-6.10.z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:6::client"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Desktop Optional (v. 6)",
"product": {
"name": "Red Hat Enterprise Linux Desktop Optional (v. 6)",
"product_id": "6Client-optional-6.10.z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:6::client"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux HPC Node (v. 6)",
"product": {
"name": "Red Hat Enterprise Linux HPC Node (v. 6)",
"product_id": "6ComputeNode-6.10.z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:6::computenode"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux HPC Node Optional (v. 6)",
"product": {
"name": "Red Hat Enterprise Linux HPC Node Optional (v. 6)",
"product_id": "6ComputeNode-optional-6.10.z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:6::computenode"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Server (v. 6)",
"product": {
"name": "Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.10.z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:6::server"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Server Optional (v. 6)",
"product": {
"name": "Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional-6.10.z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:6::server"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Workstation (v. 6)",
"product": {
"name": "Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-6.10.z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:6::workstation"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Workstation Optional (v. 6)",
"product": {
"name": "Red Hat Enterprise Linux Workstation Optional (v. 6)",
"product_id": "6Workstation-optional-6.10.z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:6::workstation"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el6_10.x86_64",
"product": {
"name": "java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el6_10.x86_64",
"product_id": "java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el6_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.7.0-openjdk-debuginfo@1.7.0.191-2.6.15.4.el6_10?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el6_10.x86_64",
"product": {
"name": "java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el6_10.x86_64",
"product_id": "java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el6_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.7.0-openjdk-devel@1.7.0.191-2.6.15.4.el6_10?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el6_10.x86_64",
"product": {
"name": "java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el6_10.x86_64",
"product_id": "java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el6_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.7.0-openjdk@1.7.0.191-2.6.15.4.el6_10?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el6_10.x86_64",
"product": {
"name": "java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el6_10.x86_64",
"product_id": "java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el6_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.7.0-openjdk-demo@1.7.0.191-2.6.15.4.el6_10?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el6_10.x86_64",
"product": {
"name": "java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el6_10.x86_64",
"product_id": "java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el6_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.7.0-openjdk-src@1.7.0.191-2.6.15.4.el6_10?arch=x86_64\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el6_10.i686",
"product": {
"name": "java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el6_10.i686",
"product_id": "java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el6_10.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.7.0-openjdk-debuginfo@1.7.0.191-2.6.15.4.el6_10?arch=i686\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el6_10.i686",
"product": {
"name": "java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el6_10.i686",
"product_id": "java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el6_10.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.7.0-openjdk-devel@1.7.0.191-2.6.15.4.el6_10?arch=i686\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el6_10.i686",
"product": {
"name": "java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el6_10.i686",
"product_id": "java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el6_10.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.7.0-openjdk@1.7.0.191-2.6.15.4.el6_10?arch=i686\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el6_10.i686",
"product": {
"name": "java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el6_10.i686",
"product_id": "java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el6_10.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.7.0-openjdk-demo@1.7.0.191-2.6.15.4.el6_10?arch=i686\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el6_10.i686",
"product": {
"name": "java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el6_10.i686",
"product_id": "java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el6_10.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.7.0-openjdk-src@1.7.0.191-2.6.15.4.el6_10?arch=i686\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "i686"
},
{
"branches": [
{
"category": "product_version",
"name": "java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el6_10.src",
"product": {
"name": "java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el6_10.src",
"product_id": "java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el6_10.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.7.0-openjdk@1.7.0.191-2.6.15.4.el6_10?arch=src\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "java-1.7.0-openjdk-javadoc-1:1.7.0.191-2.6.15.4.el6_10.noarch",
"product": {
"name": "java-1.7.0-openjdk-javadoc-1:1.7.0.191-2.6.15.4.el6_10.noarch",
"product_id": "java-1.7.0-openjdk-javadoc-1:1.7.0.191-2.6.15.4.el6_10.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.7.0-openjdk-javadoc@1.7.0.191-2.6.15.4.el6_10?arch=noarch\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "noarch"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el6_10.i686 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client-6.10.z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el6_10.i686"
},
"product_reference": "java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el6_10.i686",
"relates_to_product_reference": "6Client-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el6_10.src as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client-6.10.z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el6_10.src"
},
"product_reference": "java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el6_10.src",
"relates_to_product_reference": "6Client-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el6_10.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client-6.10.z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el6_10.x86_64"
},
"product_reference": "java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el6_10.x86_64",
"relates_to_product_reference": "6Client-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el6_10.i686 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client-6.10.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el6_10.i686"
},
"product_reference": "java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el6_10.i686",
"relates_to_product_reference": "6Client-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el6_10.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client-6.10.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el6_10.x86_64"
},
"product_reference": "java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el6_10.x86_64",
"relates_to_product_reference": "6Client-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el6_10.i686 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client-6.10.z:java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el6_10.i686"
},
"product_reference": "java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el6_10.i686",
"relates_to_product_reference": "6Client-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el6_10.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client-6.10.z:java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el6_10.x86_64"
},
"product_reference": "java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el6_10.x86_64",
"relates_to_product_reference": "6Client-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el6_10.i686 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client-6.10.z:java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el6_10.i686"
},
"product_reference": "java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el6_10.i686",
"relates_to_product_reference": "6Client-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el6_10.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client-6.10.z:java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el6_10.x86_64"
},
"product_reference": "java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el6_10.x86_64",
"relates_to_product_reference": "6Client-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-javadoc-1:1.7.0.191-2.6.15.4.el6_10.noarch as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client-6.10.z:java-1.7.0-openjdk-javadoc-1:1.7.0.191-2.6.15.4.el6_10.noarch"
},
"product_reference": "java-1.7.0-openjdk-javadoc-1:1.7.0.191-2.6.15.4.el6_10.noarch",
"relates_to_product_reference": "6Client-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el6_10.i686 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client-6.10.z:java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el6_10.i686"
},
"product_reference": "java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el6_10.i686",
"relates_to_product_reference": "6Client-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el6_10.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client-6.10.z:java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el6_10.x86_64"
},
"product_reference": "java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el6_10.x86_64",
"relates_to_product_reference": "6Client-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el6_10.i686 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
"product_id": "6Client-optional-6.10.z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el6_10.i686"
},
"product_reference": "java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el6_10.i686",
"relates_to_product_reference": "6Client-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el6_10.src as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
"product_id": "6Client-optional-6.10.z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el6_10.src"
},
"product_reference": "java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el6_10.src",
"relates_to_product_reference": "6Client-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el6_10.x86_64 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
"product_id": "6Client-optional-6.10.z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el6_10.x86_64"
},
"product_reference": "java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el6_10.x86_64",
"relates_to_product_reference": "6Client-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el6_10.i686 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
"product_id": "6Client-optional-6.10.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el6_10.i686"
},
"product_reference": "java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el6_10.i686",
"relates_to_product_reference": "6Client-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el6_10.x86_64 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
"product_id": "6Client-optional-6.10.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el6_10.x86_64"
},
"product_reference": "java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el6_10.x86_64",
"relates_to_product_reference": "6Client-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el6_10.i686 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
"product_id": "6Client-optional-6.10.z:java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el6_10.i686"
},
"product_reference": "java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el6_10.i686",
"relates_to_product_reference": "6Client-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el6_10.x86_64 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
"product_id": "6Client-optional-6.10.z:java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el6_10.x86_64"
},
"product_reference": "java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el6_10.x86_64",
"relates_to_product_reference": "6Client-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el6_10.i686 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
"product_id": "6Client-optional-6.10.z:java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el6_10.i686"
},
"product_reference": "java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el6_10.i686",
"relates_to_product_reference": "6Client-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el6_10.x86_64 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
"product_id": "6Client-optional-6.10.z:java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el6_10.x86_64"
},
"product_reference": "java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el6_10.x86_64",
"relates_to_product_reference": "6Client-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-javadoc-1:1.7.0.191-2.6.15.4.el6_10.noarch as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
"product_id": "6Client-optional-6.10.z:java-1.7.0-openjdk-javadoc-1:1.7.0.191-2.6.15.4.el6_10.noarch"
},
"product_reference": "java-1.7.0-openjdk-javadoc-1:1.7.0.191-2.6.15.4.el6_10.noarch",
"relates_to_product_reference": "6Client-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el6_10.i686 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
"product_id": "6Client-optional-6.10.z:java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el6_10.i686"
},
"product_reference": "java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el6_10.i686",
"relates_to_product_reference": "6Client-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el6_10.x86_64 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
"product_id": "6Client-optional-6.10.z:java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el6_10.x86_64"
},
"product_reference": "java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el6_10.x86_64",
"relates_to_product_reference": "6Client-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el6_10.i686 as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
"product_id": "6ComputeNode-6.10.z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el6_10.i686"
},
"product_reference": "java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el6_10.i686",
"relates_to_product_reference": "6ComputeNode-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el6_10.src as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
"product_id": "6ComputeNode-6.10.z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el6_10.src"
},
"product_reference": "java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el6_10.src",
"relates_to_product_reference": "6ComputeNode-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el6_10.x86_64 as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
"product_id": "6ComputeNode-6.10.z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el6_10.x86_64"
},
"product_reference": "java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el6_10.x86_64",
"relates_to_product_reference": "6ComputeNode-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el6_10.i686 as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
"product_id": "6ComputeNode-6.10.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el6_10.i686"
},
"product_reference": "java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el6_10.i686",
"relates_to_product_reference": "6ComputeNode-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el6_10.x86_64 as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
"product_id": "6ComputeNode-6.10.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el6_10.x86_64"
},
"product_reference": "java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el6_10.x86_64",
"relates_to_product_reference": "6ComputeNode-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el6_10.i686 as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
"product_id": "6ComputeNode-6.10.z:java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el6_10.i686"
},
"product_reference": "java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el6_10.i686",
"relates_to_product_reference": "6ComputeNode-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el6_10.x86_64 as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
"product_id": "6ComputeNode-6.10.z:java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el6_10.x86_64"
},
"product_reference": "java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el6_10.x86_64",
"relates_to_product_reference": "6ComputeNode-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el6_10.i686 as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
"product_id": "6ComputeNode-6.10.z:java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el6_10.i686"
},
"product_reference": "java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el6_10.i686",
"relates_to_product_reference": "6ComputeNode-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el6_10.x86_64 as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
"product_id": "6ComputeNode-6.10.z:java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el6_10.x86_64"
},
"product_reference": "java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el6_10.x86_64",
"relates_to_product_reference": "6ComputeNode-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-javadoc-1:1.7.0.191-2.6.15.4.el6_10.noarch as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
"product_id": "6ComputeNode-6.10.z:java-1.7.0-openjdk-javadoc-1:1.7.0.191-2.6.15.4.el6_10.noarch"
},
"product_reference": "java-1.7.0-openjdk-javadoc-1:1.7.0.191-2.6.15.4.el6_10.noarch",
"relates_to_product_reference": "6ComputeNode-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el6_10.i686 as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
"product_id": "6ComputeNode-6.10.z:java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el6_10.i686"
},
"product_reference": "java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el6_10.i686",
"relates_to_product_reference": "6ComputeNode-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el6_10.x86_64 as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
"product_id": "6ComputeNode-6.10.z:java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el6_10.x86_64"
},
"product_reference": "java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el6_10.x86_64",
"relates_to_product_reference": "6ComputeNode-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el6_10.i686 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
"product_id": "6ComputeNode-optional-6.10.z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el6_10.i686"
},
"product_reference": "java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el6_10.i686",
"relates_to_product_reference": "6ComputeNode-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el6_10.src as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
"product_id": "6ComputeNode-optional-6.10.z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el6_10.src"
},
"product_reference": "java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el6_10.src",
"relates_to_product_reference": "6ComputeNode-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el6_10.x86_64 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
"product_id": "6ComputeNode-optional-6.10.z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el6_10.x86_64"
},
"product_reference": "java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el6_10.x86_64",
"relates_to_product_reference": "6ComputeNode-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el6_10.i686 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
"product_id": "6ComputeNode-optional-6.10.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el6_10.i686"
},
"product_reference": "java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el6_10.i686",
"relates_to_product_reference": "6ComputeNode-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el6_10.x86_64 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
"product_id": "6ComputeNode-optional-6.10.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el6_10.x86_64"
},
"product_reference": "java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el6_10.x86_64",
"relates_to_product_reference": "6ComputeNode-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el6_10.i686 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
"product_id": "6ComputeNode-optional-6.10.z:java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el6_10.i686"
},
"product_reference": "java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el6_10.i686",
"relates_to_product_reference": "6ComputeNode-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el6_10.x86_64 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
"product_id": "6ComputeNode-optional-6.10.z:java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el6_10.x86_64"
},
"product_reference": "java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el6_10.x86_64",
"relates_to_product_reference": "6ComputeNode-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el6_10.i686 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
"product_id": "6ComputeNode-optional-6.10.z:java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el6_10.i686"
},
"product_reference": "java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el6_10.i686",
"relates_to_product_reference": "6ComputeNode-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el6_10.x86_64 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
"product_id": "6ComputeNode-optional-6.10.z:java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el6_10.x86_64"
},
"product_reference": "java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el6_10.x86_64",
"relates_to_product_reference": "6ComputeNode-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-javadoc-1:1.7.0.191-2.6.15.4.el6_10.noarch as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
"product_id": "6ComputeNode-optional-6.10.z:java-1.7.0-openjdk-javadoc-1:1.7.0.191-2.6.15.4.el6_10.noarch"
},
"product_reference": "java-1.7.0-openjdk-javadoc-1:1.7.0.191-2.6.15.4.el6_10.noarch",
"relates_to_product_reference": "6ComputeNode-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el6_10.i686 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
"product_id": "6ComputeNode-optional-6.10.z:java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el6_10.i686"
},
"product_reference": "java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el6_10.i686",
"relates_to_product_reference": "6ComputeNode-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el6_10.x86_64 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
"product_id": "6ComputeNode-optional-6.10.z:java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el6_10.x86_64"
},
"product_reference": "java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el6_10.x86_64",
"relates_to_product_reference": "6ComputeNode-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el6_10.i686 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.10.z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el6_10.i686"
},
"product_reference": "java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el6_10.i686",
"relates_to_product_reference": "6Server-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el6_10.src as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.10.z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el6_10.src"
},
"product_reference": "java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el6_10.src",
"relates_to_product_reference": "6Server-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el6_10.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.10.z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el6_10.x86_64"
},
"product_reference": "java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el6_10.x86_64",
"relates_to_product_reference": "6Server-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el6_10.i686 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.10.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el6_10.i686"
},
"product_reference": "java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el6_10.i686",
"relates_to_product_reference": "6Server-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el6_10.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.10.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el6_10.x86_64"
},
"product_reference": "java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el6_10.x86_64",
"relates_to_product_reference": "6Server-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el6_10.i686 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.10.z:java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el6_10.i686"
},
"product_reference": "java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el6_10.i686",
"relates_to_product_reference": "6Server-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el6_10.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.10.z:java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el6_10.x86_64"
},
"product_reference": "java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el6_10.x86_64",
"relates_to_product_reference": "6Server-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el6_10.i686 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.10.z:java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el6_10.i686"
},
"product_reference": "java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el6_10.i686",
"relates_to_product_reference": "6Server-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el6_10.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.10.z:java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el6_10.x86_64"
},
"product_reference": "java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el6_10.x86_64",
"relates_to_product_reference": "6Server-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-javadoc-1:1.7.0.191-2.6.15.4.el6_10.noarch as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.10.z:java-1.7.0-openjdk-javadoc-1:1.7.0.191-2.6.15.4.el6_10.noarch"
},
"product_reference": "java-1.7.0-openjdk-javadoc-1:1.7.0.191-2.6.15.4.el6_10.noarch",
"relates_to_product_reference": "6Server-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el6_10.i686 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.10.z:java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el6_10.i686"
},
"product_reference": "java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el6_10.i686",
"relates_to_product_reference": "6Server-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el6_10.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.10.z:java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el6_10.x86_64"
},
"product_reference": "java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el6_10.x86_64",
"relates_to_product_reference": "6Server-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el6_10.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional-6.10.z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el6_10.i686"
},
"product_reference": "java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el6_10.i686",
"relates_to_product_reference": "6Server-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el6_10.src as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional-6.10.z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el6_10.src"
},
"product_reference": "java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el6_10.src",
"relates_to_product_reference": "6Server-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el6_10.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional-6.10.z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el6_10.x86_64"
},
"product_reference": "java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el6_10.x86_64",
"relates_to_product_reference": "6Server-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el6_10.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional-6.10.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el6_10.i686"
},
"product_reference": "java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el6_10.i686",
"relates_to_product_reference": "6Server-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el6_10.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional-6.10.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el6_10.x86_64"
},
"product_reference": "java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el6_10.x86_64",
"relates_to_product_reference": "6Server-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el6_10.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional-6.10.z:java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el6_10.i686"
},
"product_reference": "java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el6_10.i686",
"relates_to_product_reference": "6Server-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el6_10.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional-6.10.z:java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el6_10.x86_64"
},
"product_reference": "java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el6_10.x86_64",
"relates_to_product_reference": "6Server-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el6_10.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional-6.10.z:java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el6_10.i686"
},
"product_reference": "java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el6_10.i686",
"relates_to_product_reference": "6Server-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el6_10.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional-6.10.z:java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el6_10.x86_64"
},
"product_reference": "java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el6_10.x86_64",
"relates_to_product_reference": "6Server-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-javadoc-1:1.7.0.191-2.6.15.4.el6_10.noarch as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional-6.10.z:java-1.7.0-openjdk-javadoc-1:1.7.0.191-2.6.15.4.el6_10.noarch"
},
"product_reference": "java-1.7.0-openjdk-javadoc-1:1.7.0.191-2.6.15.4.el6_10.noarch",
"relates_to_product_reference": "6Server-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el6_10.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional-6.10.z:java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el6_10.i686"
},
"product_reference": "java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el6_10.i686",
"relates_to_product_reference": "6Server-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el6_10.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional-6.10.z:java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el6_10.x86_64"
},
"product_reference": "java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el6_10.x86_64",
"relates_to_product_reference": "6Server-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el6_10.i686 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-6.10.z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el6_10.i686"
},
"product_reference": "java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el6_10.i686",
"relates_to_product_reference": "6Workstation-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el6_10.src as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-6.10.z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el6_10.src"
},
"product_reference": "java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el6_10.src",
"relates_to_product_reference": "6Workstation-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el6_10.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-6.10.z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el6_10.x86_64"
},
"product_reference": "java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el6_10.x86_64",
"relates_to_product_reference": "6Workstation-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el6_10.i686 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-6.10.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el6_10.i686"
},
"product_reference": "java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el6_10.i686",
"relates_to_product_reference": "6Workstation-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el6_10.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-6.10.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el6_10.x86_64"
},
"product_reference": "java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el6_10.x86_64",
"relates_to_product_reference": "6Workstation-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el6_10.i686 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-6.10.z:java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el6_10.i686"
},
"product_reference": "java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el6_10.i686",
"relates_to_product_reference": "6Workstation-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el6_10.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-6.10.z:java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el6_10.x86_64"
},
"product_reference": "java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el6_10.x86_64",
"relates_to_product_reference": "6Workstation-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el6_10.i686 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-6.10.z:java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el6_10.i686"
},
"product_reference": "java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el6_10.i686",
"relates_to_product_reference": "6Workstation-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el6_10.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-6.10.z:java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el6_10.x86_64"
},
"product_reference": "java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el6_10.x86_64",
"relates_to_product_reference": "6Workstation-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-javadoc-1:1.7.0.191-2.6.15.4.el6_10.noarch as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-6.10.z:java-1.7.0-openjdk-javadoc-1:1.7.0.191-2.6.15.4.el6_10.noarch"
},
"product_reference": "java-1.7.0-openjdk-javadoc-1:1.7.0.191-2.6.15.4.el6_10.noarch",
"relates_to_product_reference": "6Workstation-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el6_10.i686 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-6.10.z:java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el6_10.i686"
},
"product_reference": "java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el6_10.i686",
"relates_to_product_reference": "6Workstation-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el6_10.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-6.10.z:java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el6_10.x86_64"
},
"product_reference": "java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el6_10.x86_64",
"relates_to_product_reference": "6Workstation-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el6_10.i686 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
"product_id": "6Workstation-optional-6.10.z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el6_10.i686"
},
"product_reference": "java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el6_10.i686",
"relates_to_product_reference": "6Workstation-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el6_10.src as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
"product_id": "6Workstation-optional-6.10.z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el6_10.src"
},
"product_reference": "java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el6_10.src",
"relates_to_product_reference": "6Workstation-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el6_10.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
"product_id": "6Workstation-optional-6.10.z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el6_10.x86_64"
},
"product_reference": "java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el6_10.x86_64",
"relates_to_product_reference": "6Workstation-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el6_10.i686 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
"product_id": "6Workstation-optional-6.10.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el6_10.i686"
},
"product_reference": "java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el6_10.i686",
"relates_to_product_reference": "6Workstation-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el6_10.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
"product_id": "6Workstation-optional-6.10.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el6_10.x86_64"
},
"product_reference": "java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el6_10.x86_64",
"relates_to_product_reference": "6Workstation-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el6_10.i686 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
"product_id": "6Workstation-optional-6.10.z:java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el6_10.i686"
},
"product_reference": "java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el6_10.i686",
"relates_to_product_reference": "6Workstation-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el6_10.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
"product_id": "6Workstation-optional-6.10.z:java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el6_10.x86_64"
},
"product_reference": "java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el6_10.x86_64",
"relates_to_product_reference": "6Workstation-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el6_10.i686 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
"product_id": "6Workstation-optional-6.10.z:java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el6_10.i686"
},
"product_reference": "java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el6_10.i686",
"relates_to_product_reference": "6Workstation-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el6_10.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
"product_id": "6Workstation-optional-6.10.z:java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el6_10.x86_64"
},
"product_reference": "java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el6_10.x86_64",
"relates_to_product_reference": "6Workstation-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-javadoc-1:1.7.0.191-2.6.15.4.el6_10.noarch as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
"product_id": "6Workstation-optional-6.10.z:java-1.7.0-openjdk-javadoc-1:1.7.0.191-2.6.15.4.el6_10.noarch"
},
"product_reference": "java-1.7.0-openjdk-javadoc-1:1.7.0.191-2.6.15.4.el6_10.noarch",
"relates_to_product_reference": "6Workstation-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el6_10.i686 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
"product_id": "6Workstation-optional-6.10.z:java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el6_10.i686"
},
"product_reference": "java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el6_10.i686",
"relates_to_product_reference": "6Workstation-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el6_10.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
"product_id": "6Workstation-optional-6.10.z:java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el6_10.x86_64"
},
"product_reference": "java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el6_10.x86_64",
"relates_to_product_reference": "6Workstation-optional-6.10.z"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2018-2952",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2018-07-11T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1600925"
}
],
"notes": [
{
"category": "description",
"text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Concurrency). Supported versions that are affected are Java SE: 6u191, 7u181, 8u172 and 10.0.1; Java SE Embedded: 8u171; JRockit: R28.3.18. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 3.7 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK: insufficient index validation in PatternSyntaxException getMessage() (Concurrency, 8199547)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-6.10.z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el6_10.i686",
"6Client-6.10.z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el6_10.src",
"6Client-6.10.z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el6_10.x86_64",
"6Client-6.10.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el6_10.i686",
"6Client-6.10.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el6_10.x86_64",
"6Client-6.10.z:java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el6_10.i686",
"6Client-6.10.z:java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el6_10.x86_64",
"6Client-6.10.z:java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el6_10.i686",
"6Client-6.10.z:java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el6_10.x86_64",
"6Client-6.10.z:java-1.7.0-openjdk-javadoc-1:1.7.0.191-2.6.15.4.el6_10.noarch",
"6Client-6.10.z:java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el6_10.i686",
"6Client-6.10.z:java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el6_10.x86_64",
"6Client-optional-6.10.z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el6_10.i686",
"6Client-optional-6.10.z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el6_10.src",
"6Client-optional-6.10.z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el6_10.x86_64",
"6Client-optional-6.10.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el6_10.i686",
"6Client-optional-6.10.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el6_10.x86_64",
"6Client-optional-6.10.z:java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el6_10.i686",
"6Client-optional-6.10.z:java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el6_10.x86_64",
"6Client-optional-6.10.z:java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el6_10.i686",
"6Client-optional-6.10.z:java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el6_10.x86_64",
"6Client-optional-6.10.z:java-1.7.0-openjdk-javadoc-1:1.7.0.191-2.6.15.4.el6_10.noarch",
"6Client-optional-6.10.z:java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el6_10.i686",
"6Client-optional-6.10.z:java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el6_10.x86_64",
"6ComputeNode-6.10.z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el6_10.i686",
"6ComputeNode-6.10.z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el6_10.src",
"6ComputeNode-6.10.z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el6_10.x86_64",
"6ComputeNode-6.10.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el6_10.i686",
"6ComputeNode-6.10.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el6_10.x86_64",
"6ComputeNode-6.10.z:java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el6_10.i686",
"6ComputeNode-6.10.z:java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el6_10.x86_64",
"6ComputeNode-6.10.z:java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el6_10.i686",
"6ComputeNode-6.10.z:java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el6_10.x86_64",
"6ComputeNode-6.10.z:java-1.7.0-openjdk-javadoc-1:1.7.0.191-2.6.15.4.el6_10.noarch",
"6ComputeNode-6.10.z:java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el6_10.i686",
"6ComputeNode-6.10.z:java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el6_10.i686",
"6ComputeNode-optional-6.10.z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el6_10.src",
"6ComputeNode-optional-6.10.z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el6_10.i686",
"6ComputeNode-optional-6.10.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el6_10.i686",
"6ComputeNode-optional-6.10.z:java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el6_10.i686",
"6ComputeNode-optional-6.10.z:java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:java-1.7.0-openjdk-javadoc-1:1.7.0.191-2.6.15.4.el6_10.noarch",
"6ComputeNode-optional-6.10.z:java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el6_10.i686",
"6ComputeNode-optional-6.10.z:java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el6_10.x86_64",
"6Server-6.10.z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el6_10.i686",
"6Server-6.10.z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el6_10.src",
"6Server-6.10.z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el6_10.x86_64",
"6Server-6.10.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el6_10.i686",
"6Server-6.10.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el6_10.x86_64",
"6Server-6.10.z:java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el6_10.i686",
"6Server-6.10.z:java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el6_10.x86_64",
"6Server-6.10.z:java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el6_10.i686",
"6Server-6.10.z:java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el6_10.x86_64",
"6Server-6.10.z:java-1.7.0-openjdk-javadoc-1:1.7.0.191-2.6.15.4.el6_10.noarch",
"6Server-6.10.z:java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el6_10.i686",
"6Server-6.10.z:java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el6_10.x86_64",
"6Server-optional-6.10.z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el6_10.i686",
"6Server-optional-6.10.z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el6_10.src",
"6Server-optional-6.10.z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el6_10.x86_64",
"6Server-optional-6.10.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el6_10.i686",
"6Server-optional-6.10.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el6_10.x86_64",
"6Server-optional-6.10.z:java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el6_10.i686",
"6Server-optional-6.10.z:java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el6_10.x86_64",
"6Server-optional-6.10.z:java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el6_10.i686",
"6Server-optional-6.10.z:java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el6_10.x86_64",
"6Server-optional-6.10.z:java-1.7.0-openjdk-javadoc-1:1.7.0.191-2.6.15.4.el6_10.noarch",
"6Server-optional-6.10.z:java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el6_10.i686",
"6Server-optional-6.10.z:java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el6_10.x86_64",
"6Workstation-6.10.z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el6_10.i686",
"6Workstation-6.10.z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el6_10.src",
"6Workstation-6.10.z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el6_10.x86_64",
"6Workstation-6.10.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el6_10.i686",
"6Workstation-6.10.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el6_10.x86_64",
"6Workstation-6.10.z:java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el6_10.i686",
"6Workstation-6.10.z:java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el6_10.x86_64",
"6Workstation-6.10.z:java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el6_10.i686",
"6Workstation-6.10.z:java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el6_10.x86_64",
"6Workstation-6.10.z:java-1.7.0-openjdk-javadoc-1:1.7.0.191-2.6.15.4.el6_10.noarch",
"6Workstation-6.10.z:java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el6_10.i686",
"6Workstation-6.10.z:java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el6_10.x86_64",
"6Workstation-optional-6.10.z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el6_10.i686",
"6Workstation-optional-6.10.z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el6_10.src",
"6Workstation-optional-6.10.z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el6_10.x86_64",
"6Workstation-optional-6.10.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el6_10.i686",
"6Workstation-optional-6.10.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el6_10.x86_64",
"6Workstation-optional-6.10.z:java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el6_10.i686",
"6Workstation-optional-6.10.z:java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el6_10.x86_64",
"6Workstation-optional-6.10.z:java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el6_10.i686",
"6Workstation-optional-6.10.z:java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el6_10.x86_64",
"6Workstation-optional-6.10.z:java-1.7.0-openjdk-javadoc-1:1.7.0.191-2.6.15.4.el6_10.noarch",
"6Workstation-optional-6.10.z:java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el6_10.i686",
"6Workstation-optional-6.10.z:java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el6_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-2952"
},
{
"category": "external",
"summary": "RHBZ#1600925",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1600925"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-2952",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-2952"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2952",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2952"
}
],
"release_date": "2018-07-17T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-07-30T17:50:09+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of OpenJDK Java must be restarted for this update to take effect.",
"product_ids": [
"6Client-6.10.z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el6_10.i686",
"6Client-6.10.z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el6_10.src",
"6Client-6.10.z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el6_10.x86_64",
"6Client-6.10.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el6_10.i686",
"6Client-6.10.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el6_10.x86_64",
"6Client-6.10.z:java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el6_10.i686",
"6Client-6.10.z:java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el6_10.x86_64",
"6Client-6.10.z:java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el6_10.i686",
"6Client-6.10.z:java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el6_10.x86_64",
"6Client-6.10.z:java-1.7.0-openjdk-javadoc-1:1.7.0.191-2.6.15.4.el6_10.noarch",
"6Client-6.10.z:java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el6_10.i686",
"6Client-6.10.z:java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el6_10.x86_64",
"6Client-optional-6.10.z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el6_10.i686",
"6Client-optional-6.10.z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el6_10.src",
"6Client-optional-6.10.z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el6_10.x86_64",
"6Client-optional-6.10.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el6_10.i686",
"6Client-optional-6.10.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el6_10.x86_64",
"6Client-optional-6.10.z:java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el6_10.i686",
"6Client-optional-6.10.z:java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el6_10.x86_64",
"6Client-optional-6.10.z:java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el6_10.i686",
"6Client-optional-6.10.z:java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el6_10.x86_64",
"6Client-optional-6.10.z:java-1.7.0-openjdk-javadoc-1:1.7.0.191-2.6.15.4.el6_10.noarch",
"6Client-optional-6.10.z:java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el6_10.i686",
"6Client-optional-6.10.z:java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el6_10.x86_64",
"6ComputeNode-6.10.z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el6_10.i686",
"6ComputeNode-6.10.z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el6_10.src",
"6ComputeNode-6.10.z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el6_10.x86_64",
"6ComputeNode-6.10.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el6_10.i686",
"6ComputeNode-6.10.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el6_10.x86_64",
"6ComputeNode-6.10.z:java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el6_10.i686",
"6ComputeNode-6.10.z:java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el6_10.x86_64",
"6ComputeNode-6.10.z:java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el6_10.i686",
"6ComputeNode-6.10.z:java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el6_10.x86_64",
"6ComputeNode-6.10.z:java-1.7.0-openjdk-javadoc-1:1.7.0.191-2.6.15.4.el6_10.noarch",
"6ComputeNode-6.10.z:java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el6_10.i686",
"6ComputeNode-6.10.z:java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el6_10.i686",
"6ComputeNode-optional-6.10.z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el6_10.src",
"6ComputeNode-optional-6.10.z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el6_10.i686",
"6ComputeNode-optional-6.10.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el6_10.i686",
"6ComputeNode-optional-6.10.z:java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el6_10.i686",
"6ComputeNode-optional-6.10.z:java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:java-1.7.0-openjdk-javadoc-1:1.7.0.191-2.6.15.4.el6_10.noarch",
"6ComputeNode-optional-6.10.z:java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el6_10.i686",
"6ComputeNode-optional-6.10.z:java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el6_10.x86_64",
"6Server-6.10.z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el6_10.i686",
"6Server-6.10.z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el6_10.src",
"6Server-6.10.z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el6_10.x86_64",
"6Server-6.10.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el6_10.i686",
"6Server-6.10.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el6_10.x86_64",
"6Server-6.10.z:java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el6_10.i686",
"6Server-6.10.z:java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el6_10.x86_64",
"6Server-6.10.z:java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el6_10.i686",
"6Server-6.10.z:java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el6_10.x86_64",
"6Server-6.10.z:java-1.7.0-openjdk-javadoc-1:1.7.0.191-2.6.15.4.el6_10.noarch",
"6Server-6.10.z:java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el6_10.i686",
"6Server-6.10.z:java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el6_10.x86_64",
"6Server-optional-6.10.z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el6_10.i686",
"6Server-optional-6.10.z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el6_10.src",
"6Server-optional-6.10.z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el6_10.x86_64",
"6Server-optional-6.10.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el6_10.i686",
"6Server-optional-6.10.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el6_10.x86_64",
"6Server-optional-6.10.z:java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el6_10.i686",
"6Server-optional-6.10.z:java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el6_10.x86_64",
"6Server-optional-6.10.z:java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el6_10.i686",
"6Server-optional-6.10.z:java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el6_10.x86_64",
"6Server-optional-6.10.z:java-1.7.0-openjdk-javadoc-1:1.7.0.191-2.6.15.4.el6_10.noarch",
"6Server-optional-6.10.z:java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el6_10.i686",
"6Server-optional-6.10.z:java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el6_10.x86_64",
"6Workstation-6.10.z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el6_10.i686",
"6Workstation-6.10.z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el6_10.src",
"6Workstation-6.10.z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el6_10.x86_64",
"6Workstation-6.10.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el6_10.i686",
"6Workstation-6.10.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el6_10.x86_64",
"6Workstation-6.10.z:java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el6_10.i686",
"6Workstation-6.10.z:java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el6_10.x86_64",
"6Workstation-6.10.z:java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el6_10.i686",
"6Workstation-6.10.z:java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el6_10.x86_64",
"6Workstation-6.10.z:java-1.7.0-openjdk-javadoc-1:1.7.0.191-2.6.15.4.el6_10.noarch",
"6Workstation-6.10.z:java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el6_10.i686",
"6Workstation-6.10.z:java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el6_10.x86_64",
"6Workstation-optional-6.10.z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el6_10.i686",
"6Workstation-optional-6.10.z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el6_10.src",
"6Workstation-optional-6.10.z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el6_10.x86_64",
"6Workstation-optional-6.10.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el6_10.i686",
"6Workstation-optional-6.10.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el6_10.x86_64",
"6Workstation-optional-6.10.z:java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el6_10.i686",
"6Workstation-optional-6.10.z:java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el6_10.x86_64",
"6Workstation-optional-6.10.z:java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el6_10.i686",
"6Workstation-optional-6.10.z:java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el6_10.x86_64",
"6Workstation-optional-6.10.z:java-1.7.0-openjdk-javadoc-1:1.7.0.191-2.6.15.4.el6_10.noarch",
"6Workstation-optional-6.10.z:java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el6_10.i686",
"6Workstation-optional-6.10.z:java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el6_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:2283"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 3.7,
"baseSeverity": "LOW",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"6Client-6.10.z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el6_10.i686",
"6Client-6.10.z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el6_10.src",
"6Client-6.10.z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el6_10.x86_64",
"6Client-6.10.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el6_10.i686",
"6Client-6.10.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el6_10.x86_64",
"6Client-6.10.z:java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el6_10.i686",
"6Client-6.10.z:java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el6_10.x86_64",
"6Client-6.10.z:java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el6_10.i686",
"6Client-6.10.z:java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el6_10.x86_64",
"6Client-6.10.z:java-1.7.0-openjdk-javadoc-1:1.7.0.191-2.6.15.4.el6_10.noarch",
"6Client-6.10.z:java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el6_10.i686",
"6Client-6.10.z:java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el6_10.x86_64",
"6Client-optional-6.10.z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el6_10.i686",
"6Client-optional-6.10.z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el6_10.src",
"6Client-optional-6.10.z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el6_10.x86_64",
"6Client-optional-6.10.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el6_10.i686",
"6Client-optional-6.10.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el6_10.x86_64",
"6Client-optional-6.10.z:java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el6_10.i686",
"6Client-optional-6.10.z:java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el6_10.x86_64",
"6Client-optional-6.10.z:java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el6_10.i686",
"6Client-optional-6.10.z:java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el6_10.x86_64",
"6Client-optional-6.10.z:java-1.7.0-openjdk-javadoc-1:1.7.0.191-2.6.15.4.el6_10.noarch",
"6Client-optional-6.10.z:java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el6_10.i686",
"6Client-optional-6.10.z:java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el6_10.x86_64",
"6ComputeNode-6.10.z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el6_10.i686",
"6ComputeNode-6.10.z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el6_10.src",
"6ComputeNode-6.10.z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el6_10.x86_64",
"6ComputeNode-6.10.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el6_10.i686",
"6ComputeNode-6.10.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el6_10.x86_64",
"6ComputeNode-6.10.z:java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el6_10.i686",
"6ComputeNode-6.10.z:java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el6_10.x86_64",
"6ComputeNode-6.10.z:java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el6_10.i686",
"6ComputeNode-6.10.z:java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el6_10.x86_64",
"6ComputeNode-6.10.z:java-1.7.0-openjdk-javadoc-1:1.7.0.191-2.6.15.4.el6_10.noarch",
"6ComputeNode-6.10.z:java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el6_10.i686",
"6ComputeNode-6.10.z:java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el6_10.i686",
"6ComputeNode-optional-6.10.z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el6_10.src",
"6ComputeNode-optional-6.10.z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el6_10.i686",
"6ComputeNode-optional-6.10.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el6_10.i686",
"6ComputeNode-optional-6.10.z:java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el6_10.i686",
"6ComputeNode-optional-6.10.z:java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:java-1.7.0-openjdk-javadoc-1:1.7.0.191-2.6.15.4.el6_10.noarch",
"6ComputeNode-optional-6.10.z:java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el6_10.i686",
"6ComputeNode-optional-6.10.z:java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el6_10.x86_64",
"6Server-6.10.z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el6_10.i686",
"6Server-6.10.z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el6_10.src",
"6Server-6.10.z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el6_10.x86_64",
"6Server-6.10.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el6_10.i686",
"6Server-6.10.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el6_10.x86_64",
"6Server-6.10.z:java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el6_10.i686",
"6Server-6.10.z:java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el6_10.x86_64",
"6Server-6.10.z:java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el6_10.i686",
"6Server-6.10.z:java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el6_10.x86_64",
"6Server-6.10.z:java-1.7.0-openjdk-javadoc-1:1.7.0.191-2.6.15.4.el6_10.noarch",
"6Server-6.10.z:java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el6_10.i686",
"6Server-6.10.z:java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el6_10.x86_64",
"6Server-optional-6.10.z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el6_10.i686",
"6Server-optional-6.10.z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el6_10.src",
"6Server-optional-6.10.z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el6_10.x86_64",
"6Server-optional-6.10.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el6_10.i686",
"6Server-optional-6.10.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el6_10.x86_64",
"6Server-optional-6.10.z:java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el6_10.i686",
"6Server-optional-6.10.z:java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el6_10.x86_64",
"6Server-optional-6.10.z:java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el6_10.i686",
"6Server-optional-6.10.z:java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el6_10.x86_64",
"6Server-optional-6.10.z:java-1.7.0-openjdk-javadoc-1:1.7.0.191-2.6.15.4.el6_10.noarch",
"6Server-optional-6.10.z:java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el6_10.i686",
"6Server-optional-6.10.z:java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el6_10.x86_64",
"6Workstation-6.10.z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el6_10.i686",
"6Workstation-6.10.z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el6_10.src",
"6Workstation-6.10.z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el6_10.x86_64",
"6Workstation-6.10.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el6_10.i686",
"6Workstation-6.10.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el6_10.x86_64",
"6Workstation-6.10.z:java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el6_10.i686",
"6Workstation-6.10.z:java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el6_10.x86_64",
"6Workstation-6.10.z:java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el6_10.i686",
"6Workstation-6.10.z:java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el6_10.x86_64",
"6Workstation-6.10.z:java-1.7.0-openjdk-javadoc-1:1.7.0.191-2.6.15.4.el6_10.noarch",
"6Workstation-6.10.z:java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el6_10.i686",
"6Workstation-6.10.z:java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el6_10.x86_64",
"6Workstation-optional-6.10.z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el6_10.i686",
"6Workstation-optional-6.10.z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el6_10.src",
"6Workstation-optional-6.10.z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el6_10.x86_64",
"6Workstation-optional-6.10.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el6_10.i686",
"6Workstation-optional-6.10.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el6_10.x86_64",
"6Workstation-optional-6.10.z:java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el6_10.i686",
"6Workstation-optional-6.10.z:java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el6_10.x86_64",
"6Workstation-optional-6.10.z:java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el6_10.i686",
"6Workstation-optional-6.10.z:java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el6_10.x86_64",
"6Workstation-optional-6.10.z:java-1.7.0-openjdk-javadoc-1:1.7.0.191-2.6.15.4.el6_10.noarch",
"6Workstation-optional-6.10.z:java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el6_10.i686",
"6Workstation-optional-6.10.z:java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el6_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "OpenJDK: insufficient index validation in PatternSyntaxException getMessage() (Concurrency, 8199547)"
}
]
}
rhsa-2018:2286
Vulnerability from csaf_redhat
Published
2018-07-30 15:35
Modified
2025-08-03 18:28
Summary
Red Hat Security Advisory: java-1.7.0-openjdk security update
Notes
Topic
An update for java-1.7.0-openjdk is now available for Red Hat Enterprise Linux 7.
Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
The java-1.7.0-openjdk packages provide the OpenJDK 7 Java Runtime Environment and the OpenJDK 7 Java Software Development Kit.
Security Fix(es):
* OpenJDK: insufficient index validation in PatternSyntaxException getMessage() (Concurrency, 8199547) (CVE-2018-2952)
For more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for java-1.7.0-openjdk is now available for Red Hat Enterprise Linux 7.\n\nRed Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "The java-1.7.0-openjdk packages provide the OpenJDK 7 Java Runtime Environment and the OpenJDK 7 Java Software Development Kit.\n\nSecurity Fix(es):\n\n* OpenJDK: insufficient index validation in PatternSyntaxException getMessage() (Concurrency, 8199547) (CVE-2018-2952)\n\nFor more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2018:2286",
"url": "https://access.redhat.com/errata/RHSA-2018:2286"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#moderate",
"url": "https://access.redhat.com/security/updates/classification/#moderate"
},
{
"category": "external",
"summary": "1600925",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1600925"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_2286.json"
}
],
"title": "Red Hat Security Advisory: java-1.7.0-openjdk security update",
"tracking": {
"current_release_date": "2025-08-03T18:28:54+00:00",
"generator": {
"date": "2025-08-03T18:28:54+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.6.6"
}
},
"id": "RHSA-2018:2286",
"initial_release_date": "2018-07-30T15:35:56+00:00",
"revision_history": [
{
"date": "2018-07-30T15:35:56+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2018-07-30T15:35:56+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2025-08-03T18:28:54+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Client (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.5.Z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:7::client"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Client Optional (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.5.Z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:7::client"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux ComputeNode (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.5.Z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:7::computenode"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.5.Z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:7::computenode"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Server (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.5.Z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:7::server"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)",
"product_id": "7Server-Alt-7.5.Z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:7::server"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Server Optional (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.5.Z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:7::server"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)",
"product_id": "7Server-optional-Alt-7.5.Z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:7::server"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Workstation (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.5.Z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:7::workstation"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.5.Z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:7::workstation"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"product": {
"name": "java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"product_id": "java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.7.0-openjdk-debuginfo@1.7.0.191-2.6.15.4.el7_5?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"product": {
"name": "java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"product_id": "java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.7.0-openjdk-headless@1.7.0.191-2.6.15.4.el7_5?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"product": {
"name": "java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"product_id": "java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.7.0-openjdk-devel@1.7.0.191-2.6.15.4.el7_5?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"product": {
"name": "java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"product_id": "java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.7.0-openjdk@1.7.0.191-2.6.15.4.el7_5?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"product": {
"name": "java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"product_id": "java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.7.0-openjdk-accessibility@1.7.0.191-2.6.15.4.el7_5?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"product": {
"name": "java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"product_id": "java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.7.0-openjdk-src@1.7.0.191-2.6.15.4.el7_5?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"product": {
"name": "java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"product_id": "java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.7.0-openjdk-demo@1.7.0.191-2.6.15.4.el7_5?arch=x86_64\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.src",
"product": {
"name": "java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.src",
"product_id": "java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.7.0-openjdk@1.7.0.191-2.6.15.4.el7_5?arch=src\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "java-1.7.0-openjdk-javadoc-1:1.7.0.191-2.6.15.4.el7_5.noarch",
"product": {
"name": "java-1.7.0-openjdk-javadoc-1:1.7.0.191-2.6.15.4.el7_5.noarch",
"product_id": "java-1.7.0-openjdk-javadoc-1:1.7.0.191-2.6.15.4.el7_5.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.7.0-openjdk-javadoc@1.7.0.191-2.6.15.4.el7_5?arch=noarch\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "noarch"
},
{
"branches": [
{
"category": "product_version",
"name": "java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"product": {
"name": "java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"product_id": "java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.7.0-openjdk-debuginfo@1.7.0.191-2.6.15.4.el7_5?arch=s390x\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"product": {
"name": "java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"product_id": "java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.7.0-openjdk-headless@1.7.0.191-2.6.15.4.el7_5?arch=s390x\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"product": {
"name": "java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"product_id": "java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.7.0-openjdk-devel@1.7.0.191-2.6.15.4.el7_5?arch=s390x\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"product": {
"name": "java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"product_id": "java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.7.0-openjdk@1.7.0.191-2.6.15.4.el7_5?arch=s390x\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"product": {
"name": "java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"product_id": "java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.7.0-openjdk-accessibility@1.7.0.191-2.6.15.4.el7_5?arch=s390x\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"product": {
"name": "java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"product_id": "java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.7.0-openjdk-src@1.7.0.191-2.6.15.4.el7_5?arch=s390x\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"product": {
"name": "java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"product_id": "java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.7.0-openjdk-demo@1.7.0.191-2.6.15.4.el7_5?arch=s390x\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"product": {
"name": "java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"product_id": "java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.7.0-openjdk-debuginfo@1.7.0.191-2.6.15.4.el7_5?arch=ppc64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"product": {
"name": "java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"product_id": "java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.7.0-openjdk-headless@1.7.0.191-2.6.15.4.el7_5?arch=ppc64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"product": {
"name": "java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"product_id": "java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.7.0-openjdk-devel@1.7.0.191-2.6.15.4.el7_5?arch=ppc64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"product": {
"name": "java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"product_id": "java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.7.0-openjdk@1.7.0.191-2.6.15.4.el7_5?arch=ppc64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"product": {
"name": "java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"product_id": "java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.7.0-openjdk-accessibility@1.7.0.191-2.6.15.4.el7_5?arch=ppc64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"product": {
"name": "java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"product_id": "java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.7.0-openjdk-src@1.7.0.191-2.6.15.4.el7_5?arch=ppc64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"product": {
"name": "java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"product_id": "java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.7.0-openjdk-demo@1.7.0.191-2.6.15.4.el7_5?arch=ppc64\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "ppc64"
},
{
"branches": [
{
"category": "product_version",
"name": "java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"product": {
"name": "java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"product_id": "java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.7.0-openjdk-debuginfo@1.7.0.191-2.6.15.4.el7_5?arch=ppc64le\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"product": {
"name": "java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"product_id": "java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.7.0-openjdk-headless@1.7.0.191-2.6.15.4.el7_5?arch=ppc64le\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"product": {
"name": "java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"product_id": "java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.7.0-openjdk-devel@1.7.0.191-2.6.15.4.el7_5?arch=ppc64le\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"product": {
"name": "java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"product_id": "java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.7.0-openjdk@1.7.0.191-2.6.15.4.el7_5?arch=ppc64le\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"product": {
"name": "java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"product_id": "java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.7.0-openjdk-accessibility@1.7.0.191-2.6.15.4.el7_5?arch=ppc64le\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"product": {
"name": "java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"product_id": "java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.7.0-openjdk-src@1.7.0.191-2.6.15.4.el7_5?arch=ppc64le\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"product": {
"name": "java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"product_id": "java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.7.0-openjdk-demo@1.7.0.191-2.6.15.4.el7_5?arch=ppc64le\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"product": {
"name": "java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"product_id": "java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.7.0-openjdk-debuginfo@1.7.0.191-2.6.15.4.el7_5?arch=aarch64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"product": {
"name": "java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"product_id": "java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.7.0-openjdk-headless@1.7.0.191-2.6.15.4.el7_5?arch=aarch64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"product": {
"name": "java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"product_id": "java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.7.0-openjdk-devel@1.7.0.191-2.6.15.4.el7_5?arch=aarch64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"product": {
"name": "java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"product_id": "java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.7.0-openjdk@1.7.0.191-2.6.15.4.el7_5?arch=aarch64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"product": {
"name": "java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"product_id": "java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.7.0-openjdk-accessibility@1.7.0.191-2.6.15.4.el7_5?arch=aarch64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"product": {
"name": "java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"product_id": "java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.7.0-openjdk-src@1.7.0.191-2.6.15.4.el7_5?arch=aarch64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"product": {
"name": "java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"product_id": "java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.7.0-openjdk-demo@1.7.0.191-2.6.15.4.el7_5?arch=aarch64\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "aarch64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.aarch64 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.5.Z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.aarch64"
},
"product_reference": "java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"relates_to_product_reference": "7Client-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.ppc64 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.5.Z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.ppc64"
},
"product_reference": "java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"relates_to_product_reference": "7Client-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.ppc64le as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.5.Z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.ppc64le"
},
"product_reference": "java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"relates_to_product_reference": "7Client-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.s390x as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.5.Z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.s390x"
},
"product_reference": "java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"relates_to_product_reference": "7Client-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.src as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.5.Z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.src"
},
"product_reference": "java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.src",
"relates_to_product_reference": "7Client-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.5.Z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.x86_64"
},
"product_reference": "java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"relates_to_product_reference": "7Client-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.aarch64 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.5.Z:java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.aarch64"
},
"product_reference": "java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"relates_to_product_reference": "7Client-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.ppc64 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.5.Z:java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.ppc64"
},
"product_reference": "java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"relates_to_product_reference": "7Client-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.ppc64le as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.5.Z:java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.ppc64le"
},
"product_reference": "java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"relates_to_product_reference": "7Client-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.s390x as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.5.Z:java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.s390x"
},
"product_reference": "java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"relates_to_product_reference": "7Client-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.5.Z:java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.x86_64"
},
"product_reference": "java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"relates_to_product_reference": "7Client-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.aarch64 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.5.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.aarch64"
},
"product_reference": "java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"relates_to_product_reference": "7Client-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.ppc64 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.5.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.ppc64"
},
"product_reference": "java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"relates_to_product_reference": "7Client-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.ppc64le as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.5.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.ppc64le"
},
"product_reference": "java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"relates_to_product_reference": "7Client-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.s390x as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.5.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.s390x"
},
"product_reference": "java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"relates_to_product_reference": "7Client-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.5.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.x86_64"
},
"product_reference": "java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"relates_to_product_reference": "7Client-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.aarch64 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.5.Z:java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.aarch64"
},
"product_reference": "java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"relates_to_product_reference": "7Client-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.ppc64 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.5.Z:java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.ppc64"
},
"product_reference": "java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"relates_to_product_reference": "7Client-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.ppc64le as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.5.Z:java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.ppc64le"
},
"product_reference": "java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"relates_to_product_reference": "7Client-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.s390x as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.5.Z:java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.s390x"
},
"product_reference": "java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"relates_to_product_reference": "7Client-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.5.Z:java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.x86_64"
},
"product_reference": "java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"relates_to_product_reference": "7Client-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.aarch64 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.5.Z:java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.aarch64"
},
"product_reference": "java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"relates_to_product_reference": "7Client-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.ppc64 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.5.Z:java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.ppc64"
},
"product_reference": "java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"relates_to_product_reference": "7Client-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.ppc64le as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.5.Z:java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.ppc64le"
},
"product_reference": "java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"relates_to_product_reference": "7Client-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.s390x as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.5.Z:java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.s390x"
},
"product_reference": "java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"relates_to_product_reference": "7Client-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.5.Z:java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.x86_64"
},
"product_reference": "java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"relates_to_product_reference": "7Client-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.aarch64 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.5.Z:java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.aarch64"
},
"product_reference": "java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"relates_to_product_reference": "7Client-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.ppc64 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.5.Z:java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.ppc64"
},
"product_reference": "java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"relates_to_product_reference": "7Client-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.ppc64le as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.5.Z:java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.ppc64le"
},
"product_reference": "java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"relates_to_product_reference": "7Client-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.s390x as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.5.Z:java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.s390x"
},
"product_reference": "java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"relates_to_product_reference": "7Client-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.5.Z:java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.x86_64"
},
"product_reference": "java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"relates_to_product_reference": "7Client-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-javadoc-1:1.7.0.191-2.6.15.4.el7_5.noarch as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.5.Z:java-1.7.0-openjdk-javadoc-1:1.7.0.191-2.6.15.4.el7_5.noarch"
},
"product_reference": "java-1.7.0-openjdk-javadoc-1:1.7.0.191-2.6.15.4.el7_5.noarch",
"relates_to_product_reference": "7Client-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.aarch64 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.5.Z:java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.aarch64"
},
"product_reference": "java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"relates_to_product_reference": "7Client-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.ppc64 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.5.Z:java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.ppc64"
},
"product_reference": "java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"relates_to_product_reference": "7Client-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.ppc64le as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.5.Z:java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.ppc64le"
},
"product_reference": "java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"relates_to_product_reference": "7Client-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.s390x as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.5.Z:java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.s390x"
},
"product_reference": "java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"relates_to_product_reference": "7Client-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.5.Z:java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.x86_64"
},
"product_reference": "java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"relates_to_product_reference": "7Client-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.aarch64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.5.Z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.aarch64"
},
"product_reference": "java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"relates_to_product_reference": "7Client-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.ppc64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.5.Z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.ppc64"
},
"product_reference": "java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"relates_to_product_reference": "7Client-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.ppc64le as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.5.Z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.ppc64le"
},
"product_reference": "java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"relates_to_product_reference": "7Client-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.s390x as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.5.Z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.s390x"
},
"product_reference": "java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"relates_to_product_reference": "7Client-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.src as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.5.Z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.src"
},
"product_reference": "java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.src",
"relates_to_product_reference": "7Client-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.x86_64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.5.Z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.x86_64"
},
"product_reference": "java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"relates_to_product_reference": "7Client-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.aarch64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.5.Z:java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.aarch64"
},
"product_reference": "java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"relates_to_product_reference": "7Client-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.ppc64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.5.Z:java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.ppc64"
},
"product_reference": "java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"relates_to_product_reference": "7Client-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.ppc64le as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.5.Z:java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.ppc64le"
},
"product_reference": "java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"relates_to_product_reference": "7Client-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.s390x as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.5.Z:java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.s390x"
},
"product_reference": "java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"relates_to_product_reference": "7Client-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.x86_64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.5.Z:java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.x86_64"
},
"product_reference": "java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"relates_to_product_reference": "7Client-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.aarch64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.5.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.aarch64"
},
"product_reference": "java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"relates_to_product_reference": "7Client-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.ppc64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.5.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.ppc64"
},
"product_reference": "java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"relates_to_product_reference": "7Client-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.ppc64le as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.5.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.ppc64le"
},
"product_reference": "java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"relates_to_product_reference": "7Client-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.s390x as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.5.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.s390x"
},
"product_reference": "java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"relates_to_product_reference": "7Client-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.x86_64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.5.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.x86_64"
},
"product_reference": "java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"relates_to_product_reference": "7Client-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.aarch64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.5.Z:java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.aarch64"
},
"product_reference": "java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"relates_to_product_reference": "7Client-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.ppc64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.5.Z:java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.ppc64"
},
"product_reference": "java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"relates_to_product_reference": "7Client-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.ppc64le as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.5.Z:java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.ppc64le"
},
"product_reference": "java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"relates_to_product_reference": "7Client-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.s390x as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.5.Z:java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.s390x"
},
"product_reference": "java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"relates_to_product_reference": "7Client-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.x86_64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.5.Z:java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.x86_64"
},
"product_reference": "java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"relates_to_product_reference": "7Client-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.aarch64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.5.Z:java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.aarch64"
},
"product_reference": "java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"relates_to_product_reference": "7Client-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.ppc64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.5.Z:java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.ppc64"
},
"product_reference": "java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"relates_to_product_reference": "7Client-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.ppc64le as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.5.Z:java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.ppc64le"
},
"product_reference": "java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"relates_to_product_reference": "7Client-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.s390x as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.5.Z:java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.s390x"
},
"product_reference": "java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"relates_to_product_reference": "7Client-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.x86_64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.5.Z:java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.x86_64"
},
"product_reference": "java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"relates_to_product_reference": "7Client-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.aarch64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.5.Z:java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.aarch64"
},
"product_reference": "java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"relates_to_product_reference": "7Client-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.ppc64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.5.Z:java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.ppc64"
},
"product_reference": "java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"relates_to_product_reference": "7Client-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.ppc64le as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.5.Z:java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.ppc64le"
},
"product_reference": "java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"relates_to_product_reference": "7Client-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.s390x as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.5.Z:java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.s390x"
},
"product_reference": "java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"relates_to_product_reference": "7Client-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.x86_64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.5.Z:java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.x86_64"
},
"product_reference": "java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"relates_to_product_reference": "7Client-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-javadoc-1:1.7.0.191-2.6.15.4.el7_5.noarch as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.5.Z:java-1.7.0-openjdk-javadoc-1:1.7.0.191-2.6.15.4.el7_5.noarch"
},
"product_reference": "java-1.7.0-openjdk-javadoc-1:1.7.0.191-2.6.15.4.el7_5.noarch",
"relates_to_product_reference": "7Client-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.aarch64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.5.Z:java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.aarch64"
},
"product_reference": "java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"relates_to_product_reference": "7Client-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.ppc64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.5.Z:java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.ppc64"
},
"product_reference": "java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"relates_to_product_reference": "7Client-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.ppc64le as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.5.Z:java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.ppc64le"
},
"product_reference": "java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"relates_to_product_reference": "7Client-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.s390x as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.5.Z:java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.s390x"
},
"product_reference": "java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"relates_to_product_reference": "7Client-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.x86_64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.5.Z:java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.x86_64"
},
"product_reference": "java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"relates_to_product_reference": "7Client-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.aarch64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.5.Z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.aarch64"
},
"product_reference": "java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"relates_to_product_reference": "7ComputeNode-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.ppc64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.5.Z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.ppc64"
},
"product_reference": "java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"relates_to_product_reference": "7ComputeNode-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.ppc64le as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.5.Z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.ppc64le"
},
"product_reference": "java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"relates_to_product_reference": "7ComputeNode-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.s390x as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.5.Z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.s390x"
},
"product_reference": "java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"relates_to_product_reference": "7ComputeNode-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.src as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.5.Z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.src"
},
"product_reference": "java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.src",
"relates_to_product_reference": "7ComputeNode-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.x86_64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.5.Z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.x86_64"
},
"product_reference": "java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"relates_to_product_reference": "7ComputeNode-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.aarch64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.5.Z:java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.aarch64"
},
"product_reference": "java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"relates_to_product_reference": "7ComputeNode-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.ppc64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.5.Z:java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.ppc64"
},
"product_reference": "java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"relates_to_product_reference": "7ComputeNode-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.ppc64le as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.5.Z:java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.ppc64le"
},
"product_reference": "java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"relates_to_product_reference": "7ComputeNode-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.s390x as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.5.Z:java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.s390x"
},
"product_reference": "java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"relates_to_product_reference": "7ComputeNode-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.x86_64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.5.Z:java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.x86_64"
},
"product_reference": "java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"relates_to_product_reference": "7ComputeNode-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.aarch64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.5.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.aarch64"
},
"product_reference": "java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"relates_to_product_reference": "7ComputeNode-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.ppc64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.5.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.ppc64"
},
"product_reference": "java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"relates_to_product_reference": "7ComputeNode-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.ppc64le as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.5.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.ppc64le"
},
"product_reference": "java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"relates_to_product_reference": "7ComputeNode-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.s390x as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.5.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.s390x"
},
"product_reference": "java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"relates_to_product_reference": "7ComputeNode-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.x86_64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.5.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.x86_64"
},
"product_reference": "java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"relates_to_product_reference": "7ComputeNode-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.aarch64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.5.Z:java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.aarch64"
},
"product_reference": "java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"relates_to_product_reference": "7ComputeNode-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.ppc64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.5.Z:java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.ppc64"
},
"product_reference": "java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"relates_to_product_reference": "7ComputeNode-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.ppc64le as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.5.Z:java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.ppc64le"
},
"product_reference": "java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"relates_to_product_reference": "7ComputeNode-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.s390x as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.5.Z:java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.s390x"
},
"product_reference": "java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"relates_to_product_reference": "7ComputeNode-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.x86_64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.5.Z:java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.x86_64"
},
"product_reference": "java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"relates_to_product_reference": "7ComputeNode-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.aarch64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.5.Z:java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.aarch64"
},
"product_reference": "java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"relates_to_product_reference": "7ComputeNode-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.ppc64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.5.Z:java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.ppc64"
},
"product_reference": "java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"relates_to_product_reference": "7ComputeNode-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.ppc64le as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.5.Z:java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.ppc64le"
},
"product_reference": "java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"relates_to_product_reference": "7ComputeNode-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.s390x as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.5.Z:java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.s390x"
},
"product_reference": "java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"relates_to_product_reference": "7ComputeNode-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.x86_64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.5.Z:java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.x86_64"
},
"product_reference": "java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"relates_to_product_reference": "7ComputeNode-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.aarch64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.5.Z:java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.aarch64"
},
"product_reference": "java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"relates_to_product_reference": "7ComputeNode-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.ppc64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.5.Z:java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.ppc64"
},
"product_reference": "java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"relates_to_product_reference": "7ComputeNode-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.ppc64le as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.5.Z:java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.ppc64le"
},
"product_reference": "java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"relates_to_product_reference": "7ComputeNode-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.s390x as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.5.Z:java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.s390x"
},
"product_reference": "java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"relates_to_product_reference": "7ComputeNode-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.x86_64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.5.Z:java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.x86_64"
},
"product_reference": "java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"relates_to_product_reference": "7ComputeNode-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-javadoc-1:1.7.0.191-2.6.15.4.el7_5.noarch as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.5.Z:java-1.7.0-openjdk-javadoc-1:1.7.0.191-2.6.15.4.el7_5.noarch"
},
"product_reference": "java-1.7.0-openjdk-javadoc-1:1.7.0.191-2.6.15.4.el7_5.noarch",
"relates_to_product_reference": "7ComputeNode-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.aarch64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.5.Z:java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.aarch64"
},
"product_reference": "java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"relates_to_product_reference": "7ComputeNode-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.ppc64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.5.Z:java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.ppc64"
},
"product_reference": "java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"relates_to_product_reference": "7ComputeNode-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.ppc64le as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.5.Z:java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.ppc64le"
},
"product_reference": "java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"relates_to_product_reference": "7ComputeNode-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.s390x as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.5.Z:java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.s390x"
},
"product_reference": "java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"relates_to_product_reference": "7ComputeNode-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.x86_64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.5.Z:java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.x86_64"
},
"product_reference": "java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"relates_to_product_reference": "7ComputeNode-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.aarch64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.5.Z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.aarch64"
},
"product_reference": "java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"relates_to_product_reference": "7ComputeNode-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.ppc64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.5.Z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.ppc64"
},
"product_reference": "java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"relates_to_product_reference": "7ComputeNode-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.ppc64le as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.5.Z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.ppc64le"
},
"product_reference": "java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"relates_to_product_reference": "7ComputeNode-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.s390x as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.5.Z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.s390x"
},
"product_reference": "java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"relates_to_product_reference": "7ComputeNode-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.src as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.5.Z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.src"
},
"product_reference": "java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.src",
"relates_to_product_reference": "7ComputeNode-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.5.Z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.x86_64"
},
"product_reference": "java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"relates_to_product_reference": "7ComputeNode-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.aarch64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.5.Z:java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.aarch64"
},
"product_reference": "java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"relates_to_product_reference": "7ComputeNode-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.ppc64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.5.Z:java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.ppc64"
},
"product_reference": "java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"relates_to_product_reference": "7ComputeNode-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.ppc64le as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.5.Z:java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.ppc64le"
},
"product_reference": "java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"relates_to_product_reference": "7ComputeNode-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.s390x as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.5.Z:java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.s390x"
},
"product_reference": "java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"relates_to_product_reference": "7ComputeNode-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.5.Z:java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.x86_64"
},
"product_reference": "java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"relates_to_product_reference": "7ComputeNode-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.aarch64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.5.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.aarch64"
},
"product_reference": "java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"relates_to_product_reference": "7ComputeNode-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.ppc64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.5.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.ppc64"
},
"product_reference": "java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"relates_to_product_reference": "7ComputeNode-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.ppc64le as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.5.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.ppc64le"
},
"product_reference": "java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"relates_to_product_reference": "7ComputeNode-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.s390x as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.5.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.s390x"
},
"product_reference": "java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"relates_to_product_reference": "7ComputeNode-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.5.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.x86_64"
},
"product_reference": "java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"relates_to_product_reference": "7ComputeNode-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.aarch64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.5.Z:java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.aarch64"
},
"product_reference": "java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"relates_to_product_reference": "7ComputeNode-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.ppc64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.5.Z:java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.ppc64"
},
"product_reference": "java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"relates_to_product_reference": "7ComputeNode-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.ppc64le as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.5.Z:java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.ppc64le"
},
"product_reference": "java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"relates_to_product_reference": "7ComputeNode-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.s390x as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.5.Z:java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.s390x"
},
"product_reference": "java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"relates_to_product_reference": "7ComputeNode-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.5.Z:java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.x86_64"
},
"product_reference": "java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"relates_to_product_reference": "7ComputeNode-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.aarch64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.5.Z:java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.aarch64"
},
"product_reference": "java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"relates_to_product_reference": "7ComputeNode-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.ppc64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.5.Z:java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.ppc64"
},
"product_reference": "java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"relates_to_product_reference": "7ComputeNode-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.ppc64le as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.5.Z:java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.ppc64le"
},
"product_reference": "java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"relates_to_product_reference": "7ComputeNode-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.s390x as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.5.Z:java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.s390x"
},
"product_reference": "java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"relates_to_product_reference": "7ComputeNode-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.5.Z:java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.x86_64"
},
"product_reference": "java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"relates_to_product_reference": "7ComputeNode-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.aarch64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.5.Z:java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.aarch64"
},
"product_reference": "java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"relates_to_product_reference": "7ComputeNode-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.ppc64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.5.Z:java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.ppc64"
},
"product_reference": "java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"relates_to_product_reference": "7ComputeNode-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.ppc64le as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.5.Z:java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.ppc64le"
},
"product_reference": "java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"relates_to_product_reference": "7ComputeNode-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.s390x as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.5.Z:java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.s390x"
},
"product_reference": "java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"relates_to_product_reference": "7ComputeNode-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.5.Z:java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.x86_64"
},
"product_reference": "java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"relates_to_product_reference": "7ComputeNode-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-javadoc-1:1.7.0.191-2.6.15.4.el7_5.noarch as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.5.Z:java-1.7.0-openjdk-javadoc-1:1.7.0.191-2.6.15.4.el7_5.noarch"
},
"product_reference": "java-1.7.0-openjdk-javadoc-1:1.7.0.191-2.6.15.4.el7_5.noarch",
"relates_to_product_reference": "7ComputeNode-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.aarch64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.5.Z:java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.aarch64"
},
"product_reference": "java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"relates_to_product_reference": "7ComputeNode-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.ppc64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.5.Z:java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.ppc64"
},
"product_reference": "java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"relates_to_product_reference": "7ComputeNode-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.ppc64le as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.5.Z:java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.ppc64le"
},
"product_reference": "java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"relates_to_product_reference": "7ComputeNode-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.s390x as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.5.Z:java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.s390x"
},
"product_reference": "java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"relates_to_product_reference": "7ComputeNode-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.5.Z:java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.x86_64"
},
"product_reference": "java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"relates_to_product_reference": "7ComputeNode-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.aarch64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.5.Z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.aarch64"
},
"product_reference": "java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"relates_to_product_reference": "7Server-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.5.Z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.ppc64"
},
"product_reference": "java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"relates_to_product_reference": "7Server-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.5.Z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.ppc64le"
},
"product_reference": "java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"relates_to_product_reference": "7Server-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.s390x as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.5.Z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.s390x"
},
"product_reference": "java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"relates_to_product_reference": "7Server-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.src as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.5.Z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.src"
},
"product_reference": "java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.src",
"relates_to_product_reference": "7Server-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.5.Z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.x86_64"
},
"product_reference": "java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"relates_to_product_reference": "7Server-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.aarch64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.5.Z:java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.aarch64"
},
"product_reference": "java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"relates_to_product_reference": "7Server-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.5.Z:java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.ppc64"
},
"product_reference": "java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"relates_to_product_reference": "7Server-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.5.Z:java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.ppc64le"
},
"product_reference": "java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"relates_to_product_reference": "7Server-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.s390x as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.5.Z:java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.s390x"
},
"product_reference": "java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"relates_to_product_reference": "7Server-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.5.Z:java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.x86_64"
},
"product_reference": "java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"relates_to_product_reference": "7Server-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.aarch64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.5.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.aarch64"
},
"product_reference": "java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"relates_to_product_reference": "7Server-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.5.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.ppc64"
},
"product_reference": "java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"relates_to_product_reference": "7Server-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.5.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.ppc64le"
},
"product_reference": "java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"relates_to_product_reference": "7Server-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.s390x as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.5.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.s390x"
},
"product_reference": "java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"relates_to_product_reference": "7Server-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.5.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.x86_64"
},
"product_reference": "java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"relates_to_product_reference": "7Server-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.aarch64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.5.Z:java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.aarch64"
},
"product_reference": "java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"relates_to_product_reference": "7Server-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.5.Z:java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.ppc64"
},
"product_reference": "java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"relates_to_product_reference": "7Server-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.5.Z:java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.ppc64le"
},
"product_reference": "java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"relates_to_product_reference": "7Server-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.s390x as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.5.Z:java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.s390x"
},
"product_reference": "java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"relates_to_product_reference": "7Server-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.5.Z:java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.x86_64"
},
"product_reference": "java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"relates_to_product_reference": "7Server-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.aarch64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.5.Z:java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.aarch64"
},
"product_reference": "java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"relates_to_product_reference": "7Server-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.5.Z:java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.ppc64"
},
"product_reference": "java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"relates_to_product_reference": "7Server-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.5.Z:java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.ppc64le"
},
"product_reference": "java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"relates_to_product_reference": "7Server-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.s390x as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.5.Z:java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.s390x"
},
"product_reference": "java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"relates_to_product_reference": "7Server-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.5.Z:java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.x86_64"
},
"product_reference": "java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"relates_to_product_reference": "7Server-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.aarch64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.5.Z:java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.aarch64"
},
"product_reference": "java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"relates_to_product_reference": "7Server-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.5.Z:java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.ppc64"
},
"product_reference": "java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"relates_to_product_reference": "7Server-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.5.Z:java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.ppc64le"
},
"product_reference": "java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"relates_to_product_reference": "7Server-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.s390x as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.5.Z:java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.s390x"
},
"product_reference": "java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"relates_to_product_reference": "7Server-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.5.Z:java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.x86_64"
},
"product_reference": "java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"relates_to_product_reference": "7Server-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-javadoc-1:1.7.0.191-2.6.15.4.el7_5.noarch as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.5.Z:java-1.7.0-openjdk-javadoc-1:1.7.0.191-2.6.15.4.el7_5.noarch"
},
"product_reference": "java-1.7.0-openjdk-javadoc-1:1.7.0.191-2.6.15.4.el7_5.noarch",
"relates_to_product_reference": "7Server-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.aarch64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.5.Z:java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.aarch64"
},
"product_reference": "java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"relates_to_product_reference": "7Server-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.5.Z:java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.ppc64"
},
"product_reference": "java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"relates_to_product_reference": "7Server-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.5.Z:java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.ppc64le"
},
"product_reference": "java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"relates_to_product_reference": "7Server-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.s390x as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.5.Z:java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.s390x"
},
"product_reference": "java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"relates_to_product_reference": "7Server-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.5.Z:java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.x86_64"
},
"product_reference": "java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"relates_to_product_reference": "7Server-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.aarch64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)",
"product_id": "7Server-Alt-7.5.Z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.aarch64"
},
"product_reference": "java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"relates_to_product_reference": "7Server-Alt-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.ppc64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)",
"product_id": "7Server-Alt-7.5.Z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.ppc64"
},
"product_reference": "java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"relates_to_product_reference": "7Server-Alt-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.ppc64le as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)",
"product_id": "7Server-Alt-7.5.Z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.ppc64le"
},
"product_reference": "java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"relates_to_product_reference": "7Server-Alt-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.s390x as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)",
"product_id": "7Server-Alt-7.5.Z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.s390x"
},
"product_reference": "java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"relates_to_product_reference": "7Server-Alt-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.src as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)",
"product_id": "7Server-Alt-7.5.Z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.src"
},
"product_reference": "java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.src",
"relates_to_product_reference": "7Server-Alt-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.x86_64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)",
"product_id": "7Server-Alt-7.5.Z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.x86_64"
},
"product_reference": "java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"relates_to_product_reference": "7Server-Alt-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.aarch64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)",
"product_id": "7Server-Alt-7.5.Z:java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.aarch64"
},
"product_reference": "java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"relates_to_product_reference": "7Server-Alt-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.ppc64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)",
"product_id": "7Server-Alt-7.5.Z:java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.ppc64"
},
"product_reference": "java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"relates_to_product_reference": "7Server-Alt-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.ppc64le as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)",
"product_id": "7Server-Alt-7.5.Z:java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.ppc64le"
},
"product_reference": "java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"relates_to_product_reference": "7Server-Alt-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.s390x as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)",
"product_id": "7Server-Alt-7.5.Z:java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.s390x"
},
"product_reference": "java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"relates_to_product_reference": "7Server-Alt-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.x86_64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)",
"product_id": "7Server-Alt-7.5.Z:java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.x86_64"
},
"product_reference": "java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"relates_to_product_reference": "7Server-Alt-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.aarch64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)",
"product_id": "7Server-Alt-7.5.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.aarch64"
},
"product_reference": "java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"relates_to_product_reference": "7Server-Alt-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.ppc64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)",
"product_id": "7Server-Alt-7.5.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.ppc64"
},
"product_reference": "java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"relates_to_product_reference": "7Server-Alt-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.ppc64le as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)",
"product_id": "7Server-Alt-7.5.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.ppc64le"
},
"product_reference": "java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"relates_to_product_reference": "7Server-Alt-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.s390x as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)",
"product_id": "7Server-Alt-7.5.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.s390x"
},
"product_reference": "java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"relates_to_product_reference": "7Server-Alt-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.x86_64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)",
"product_id": "7Server-Alt-7.5.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.x86_64"
},
"product_reference": "java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"relates_to_product_reference": "7Server-Alt-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.aarch64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)",
"product_id": "7Server-Alt-7.5.Z:java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.aarch64"
},
"product_reference": "java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"relates_to_product_reference": "7Server-Alt-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.ppc64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)",
"product_id": "7Server-Alt-7.5.Z:java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.ppc64"
},
"product_reference": "java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"relates_to_product_reference": "7Server-Alt-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.ppc64le as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)",
"product_id": "7Server-Alt-7.5.Z:java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.ppc64le"
},
"product_reference": "java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"relates_to_product_reference": "7Server-Alt-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.s390x as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)",
"product_id": "7Server-Alt-7.5.Z:java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.s390x"
},
"product_reference": "java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"relates_to_product_reference": "7Server-Alt-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.x86_64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)",
"product_id": "7Server-Alt-7.5.Z:java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.x86_64"
},
"product_reference": "java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"relates_to_product_reference": "7Server-Alt-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.aarch64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)",
"product_id": "7Server-Alt-7.5.Z:java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.aarch64"
},
"product_reference": "java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"relates_to_product_reference": "7Server-Alt-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.ppc64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)",
"product_id": "7Server-Alt-7.5.Z:java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.ppc64"
},
"product_reference": "java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"relates_to_product_reference": "7Server-Alt-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.ppc64le as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)",
"product_id": "7Server-Alt-7.5.Z:java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.ppc64le"
},
"product_reference": "java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"relates_to_product_reference": "7Server-Alt-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.s390x as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)",
"product_id": "7Server-Alt-7.5.Z:java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.s390x"
},
"product_reference": "java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"relates_to_product_reference": "7Server-Alt-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.x86_64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)",
"product_id": "7Server-Alt-7.5.Z:java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.x86_64"
},
"product_reference": "java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"relates_to_product_reference": "7Server-Alt-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.aarch64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)",
"product_id": "7Server-Alt-7.5.Z:java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.aarch64"
},
"product_reference": "java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"relates_to_product_reference": "7Server-Alt-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.ppc64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)",
"product_id": "7Server-Alt-7.5.Z:java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.ppc64"
},
"product_reference": "java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"relates_to_product_reference": "7Server-Alt-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.ppc64le as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)",
"product_id": "7Server-Alt-7.5.Z:java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.ppc64le"
},
"product_reference": "java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"relates_to_product_reference": "7Server-Alt-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.s390x as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)",
"product_id": "7Server-Alt-7.5.Z:java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.s390x"
},
"product_reference": "java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"relates_to_product_reference": "7Server-Alt-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.x86_64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)",
"product_id": "7Server-Alt-7.5.Z:java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.x86_64"
},
"product_reference": "java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"relates_to_product_reference": "7Server-Alt-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-javadoc-1:1.7.0.191-2.6.15.4.el7_5.noarch as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)",
"product_id": "7Server-Alt-7.5.Z:java-1.7.0-openjdk-javadoc-1:1.7.0.191-2.6.15.4.el7_5.noarch"
},
"product_reference": "java-1.7.0-openjdk-javadoc-1:1.7.0.191-2.6.15.4.el7_5.noarch",
"relates_to_product_reference": "7Server-Alt-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.aarch64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)",
"product_id": "7Server-Alt-7.5.Z:java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.aarch64"
},
"product_reference": "java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"relates_to_product_reference": "7Server-Alt-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.ppc64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)",
"product_id": "7Server-Alt-7.5.Z:java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.ppc64"
},
"product_reference": "java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"relates_to_product_reference": "7Server-Alt-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.ppc64le as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)",
"product_id": "7Server-Alt-7.5.Z:java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.ppc64le"
},
"product_reference": "java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"relates_to_product_reference": "7Server-Alt-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.s390x as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)",
"product_id": "7Server-Alt-7.5.Z:java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.s390x"
},
"product_reference": "java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"relates_to_product_reference": "7Server-Alt-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.x86_64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)",
"product_id": "7Server-Alt-7.5.Z:java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.x86_64"
},
"product_reference": "java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"relates_to_product_reference": "7Server-Alt-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.aarch64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.5.Z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.aarch64"
},
"product_reference": "java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"relates_to_product_reference": "7Server-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.5.Z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.ppc64"
},
"product_reference": "java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"relates_to_product_reference": "7Server-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.ppc64le as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.5.Z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.ppc64le"
},
"product_reference": "java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"relates_to_product_reference": "7Server-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.5.Z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.s390x"
},
"product_reference": "java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"relates_to_product_reference": "7Server-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.src as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.5.Z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.src"
},
"product_reference": "java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.src",
"relates_to_product_reference": "7Server-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.5.Z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.x86_64"
},
"product_reference": "java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"relates_to_product_reference": "7Server-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.aarch64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.5.Z:java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.aarch64"
},
"product_reference": "java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"relates_to_product_reference": "7Server-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.5.Z:java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.ppc64"
},
"product_reference": "java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"relates_to_product_reference": "7Server-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.ppc64le as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.5.Z:java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.ppc64le"
},
"product_reference": "java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"relates_to_product_reference": "7Server-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.5.Z:java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.s390x"
},
"product_reference": "java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"relates_to_product_reference": "7Server-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.5.Z:java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.x86_64"
},
"product_reference": "java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"relates_to_product_reference": "7Server-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.aarch64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.5.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.aarch64"
},
"product_reference": "java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"relates_to_product_reference": "7Server-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.5.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.ppc64"
},
"product_reference": "java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"relates_to_product_reference": "7Server-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.ppc64le as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.5.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.ppc64le"
},
"product_reference": "java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"relates_to_product_reference": "7Server-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.5.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.s390x"
},
"product_reference": "java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"relates_to_product_reference": "7Server-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.5.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.x86_64"
},
"product_reference": "java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"relates_to_product_reference": "7Server-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.aarch64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.5.Z:java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.aarch64"
},
"product_reference": "java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"relates_to_product_reference": "7Server-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.5.Z:java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.ppc64"
},
"product_reference": "java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"relates_to_product_reference": "7Server-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.ppc64le as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.5.Z:java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.ppc64le"
},
"product_reference": "java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"relates_to_product_reference": "7Server-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.5.Z:java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.s390x"
},
"product_reference": "java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"relates_to_product_reference": "7Server-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.5.Z:java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.x86_64"
},
"product_reference": "java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"relates_to_product_reference": "7Server-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.aarch64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.5.Z:java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.aarch64"
},
"product_reference": "java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"relates_to_product_reference": "7Server-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.5.Z:java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.ppc64"
},
"product_reference": "java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"relates_to_product_reference": "7Server-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.ppc64le as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.5.Z:java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.ppc64le"
},
"product_reference": "java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"relates_to_product_reference": "7Server-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.5.Z:java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.s390x"
},
"product_reference": "java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"relates_to_product_reference": "7Server-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.5.Z:java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.x86_64"
},
"product_reference": "java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"relates_to_product_reference": "7Server-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.aarch64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.5.Z:java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.aarch64"
},
"product_reference": "java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"relates_to_product_reference": "7Server-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.5.Z:java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.ppc64"
},
"product_reference": "java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"relates_to_product_reference": "7Server-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.ppc64le as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.5.Z:java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.ppc64le"
},
"product_reference": "java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"relates_to_product_reference": "7Server-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.5.Z:java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.s390x"
},
"product_reference": "java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"relates_to_product_reference": "7Server-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.5.Z:java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.x86_64"
},
"product_reference": "java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"relates_to_product_reference": "7Server-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-javadoc-1:1.7.0.191-2.6.15.4.el7_5.noarch as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.5.Z:java-1.7.0-openjdk-javadoc-1:1.7.0.191-2.6.15.4.el7_5.noarch"
},
"product_reference": "java-1.7.0-openjdk-javadoc-1:1.7.0.191-2.6.15.4.el7_5.noarch",
"relates_to_product_reference": "7Server-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.aarch64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.5.Z:java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.aarch64"
},
"product_reference": "java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"relates_to_product_reference": "7Server-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.5.Z:java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.ppc64"
},
"product_reference": "java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"relates_to_product_reference": "7Server-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.ppc64le as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.5.Z:java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.ppc64le"
},
"product_reference": "java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"relates_to_product_reference": "7Server-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.5.Z:java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.s390x"
},
"product_reference": "java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"relates_to_product_reference": "7Server-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.5.Z:java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.x86_64"
},
"product_reference": "java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"relates_to_product_reference": "7Server-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.aarch64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)",
"product_id": "7Server-optional-Alt-7.5.Z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.aarch64"
},
"product_reference": "java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"relates_to_product_reference": "7Server-optional-Alt-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.ppc64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)",
"product_id": "7Server-optional-Alt-7.5.Z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.ppc64"
},
"product_reference": "java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"relates_to_product_reference": "7Server-optional-Alt-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.ppc64le as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)",
"product_id": "7Server-optional-Alt-7.5.Z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.ppc64le"
},
"product_reference": "java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"relates_to_product_reference": "7Server-optional-Alt-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.s390x as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)",
"product_id": "7Server-optional-Alt-7.5.Z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.s390x"
},
"product_reference": "java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"relates_to_product_reference": "7Server-optional-Alt-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.src as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)",
"product_id": "7Server-optional-Alt-7.5.Z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.src"
},
"product_reference": "java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.src",
"relates_to_product_reference": "7Server-optional-Alt-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.x86_64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)",
"product_id": "7Server-optional-Alt-7.5.Z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.x86_64"
},
"product_reference": "java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"relates_to_product_reference": "7Server-optional-Alt-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.aarch64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)",
"product_id": "7Server-optional-Alt-7.5.Z:java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.aarch64"
},
"product_reference": "java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"relates_to_product_reference": "7Server-optional-Alt-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.ppc64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)",
"product_id": "7Server-optional-Alt-7.5.Z:java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.ppc64"
},
"product_reference": "java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"relates_to_product_reference": "7Server-optional-Alt-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.ppc64le as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)",
"product_id": "7Server-optional-Alt-7.5.Z:java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.ppc64le"
},
"product_reference": "java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"relates_to_product_reference": "7Server-optional-Alt-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.s390x as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)",
"product_id": "7Server-optional-Alt-7.5.Z:java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.s390x"
},
"product_reference": "java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"relates_to_product_reference": "7Server-optional-Alt-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.x86_64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)",
"product_id": "7Server-optional-Alt-7.5.Z:java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.x86_64"
},
"product_reference": "java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"relates_to_product_reference": "7Server-optional-Alt-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.aarch64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)",
"product_id": "7Server-optional-Alt-7.5.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.aarch64"
},
"product_reference": "java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"relates_to_product_reference": "7Server-optional-Alt-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.ppc64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)",
"product_id": "7Server-optional-Alt-7.5.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.ppc64"
},
"product_reference": "java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"relates_to_product_reference": "7Server-optional-Alt-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.ppc64le as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)",
"product_id": "7Server-optional-Alt-7.5.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.ppc64le"
},
"product_reference": "java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"relates_to_product_reference": "7Server-optional-Alt-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.s390x as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)",
"product_id": "7Server-optional-Alt-7.5.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.s390x"
},
"product_reference": "java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"relates_to_product_reference": "7Server-optional-Alt-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.x86_64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)",
"product_id": "7Server-optional-Alt-7.5.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.x86_64"
},
"product_reference": "java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"relates_to_product_reference": "7Server-optional-Alt-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.aarch64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)",
"product_id": "7Server-optional-Alt-7.5.Z:java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.aarch64"
},
"product_reference": "java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"relates_to_product_reference": "7Server-optional-Alt-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.ppc64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)",
"product_id": "7Server-optional-Alt-7.5.Z:java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.ppc64"
},
"product_reference": "java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"relates_to_product_reference": "7Server-optional-Alt-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.ppc64le as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)",
"product_id": "7Server-optional-Alt-7.5.Z:java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.ppc64le"
},
"product_reference": "java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"relates_to_product_reference": "7Server-optional-Alt-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.s390x as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)",
"product_id": "7Server-optional-Alt-7.5.Z:java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.s390x"
},
"product_reference": "java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"relates_to_product_reference": "7Server-optional-Alt-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.x86_64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)",
"product_id": "7Server-optional-Alt-7.5.Z:java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.x86_64"
},
"product_reference": "java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"relates_to_product_reference": "7Server-optional-Alt-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.aarch64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)",
"product_id": "7Server-optional-Alt-7.5.Z:java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.aarch64"
},
"product_reference": "java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"relates_to_product_reference": "7Server-optional-Alt-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.ppc64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)",
"product_id": "7Server-optional-Alt-7.5.Z:java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.ppc64"
},
"product_reference": "java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"relates_to_product_reference": "7Server-optional-Alt-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.ppc64le as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)",
"product_id": "7Server-optional-Alt-7.5.Z:java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.ppc64le"
},
"product_reference": "java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"relates_to_product_reference": "7Server-optional-Alt-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.s390x as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)",
"product_id": "7Server-optional-Alt-7.5.Z:java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.s390x"
},
"product_reference": "java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"relates_to_product_reference": "7Server-optional-Alt-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.x86_64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)",
"product_id": "7Server-optional-Alt-7.5.Z:java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.x86_64"
},
"product_reference": "java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"relates_to_product_reference": "7Server-optional-Alt-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.aarch64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)",
"product_id": "7Server-optional-Alt-7.5.Z:java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.aarch64"
},
"product_reference": "java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"relates_to_product_reference": "7Server-optional-Alt-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.ppc64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)",
"product_id": "7Server-optional-Alt-7.5.Z:java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.ppc64"
},
"product_reference": "java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"relates_to_product_reference": "7Server-optional-Alt-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.ppc64le as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)",
"product_id": "7Server-optional-Alt-7.5.Z:java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.ppc64le"
},
"product_reference": "java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"relates_to_product_reference": "7Server-optional-Alt-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.s390x as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)",
"product_id": "7Server-optional-Alt-7.5.Z:java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.s390x"
},
"product_reference": "java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"relates_to_product_reference": "7Server-optional-Alt-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.x86_64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)",
"product_id": "7Server-optional-Alt-7.5.Z:java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.x86_64"
},
"product_reference": "java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"relates_to_product_reference": "7Server-optional-Alt-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-javadoc-1:1.7.0.191-2.6.15.4.el7_5.noarch as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)",
"product_id": "7Server-optional-Alt-7.5.Z:java-1.7.0-openjdk-javadoc-1:1.7.0.191-2.6.15.4.el7_5.noarch"
},
"product_reference": "java-1.7.0-openjdk-javadoc-1:1.7.0.191-2.6.15.4.el7_5.noarch",
"relates_to_product_reference": "7Server-optional-Alt-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.aarch64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)",
"product_id": "7Server-optional-Alt-7.5.Z:java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.aarch64"
},
"product_reference": "java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"relates_to_product_reference": "7Server-optional-Alt-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.ppc64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)",
"product_id": "7Server-optional-Alt-7.5.Z:java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.ppc64"
},
"product_reference": "java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"relates_to_product_reference": "7Server-optional-Alt-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.ppc64le as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)",
"product_id": "7Server-optional-Alt-7.5.Z:java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.ppc64le"
},
"product_reference": "java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"relates_to_product_reference": "7Server-optional-Alt-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.s390x as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)",
"product_id": "7Server-optional-Alt-7.5.Z:java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.s390x"
},
"product_reference": "java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"relates_to_product_reference": "7Server-optional-Alt-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.x86_64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)",
"product_id": "7Server-optional-Alt-7.5.Z:java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.x86_64"
},
"product_reference": "java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"relates_to_product_reference": "7Server-optional-Alt-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.aarch64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.5.Z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.aarch64"
},
"product_reference": "java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"relates_to_product_reference": "7Workstation-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.5.Z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.ppc64"
},
"product_reference": "java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"relates_to_product_reference": "7Workstation-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.ppc64le as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.5.Z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.ppc64le"
},
"product_reference": "java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"relates_to_product_reference": "7Workstation-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.s390x as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.5.Z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.s390x"
},
"product_reference": "java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"relates_to_product_reference": "7Workstation-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.src as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.5.Z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.src"
},
"product_reference": "java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.src",
"relates_to_product_reference": "7Workstation-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.5.Z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.x86_64"
},
"product_reference": "java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"relates_to_product_reference": "7Workstation-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.aarch64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.5.Z:java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.aarch64"
},
"product_reference": "java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"relates_to_product_reference": "7Workstation-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.5.Z:java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.ppc64"
},
"product_reference": "java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"relates_to_product_reference": "7Workstation-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.ppc64le as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.5.Z:java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.ppc64le"
},
"product_reference": "java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"relates_to_product_reference": "7Workstation-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.s390x as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.5.Z:java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.s390x"
},
"product_reference": "java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"relates_to_product_reference": "7Workstation-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.5.Z:java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.x86_64"
},
"product_reference": "java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"relates_to_product_reference": "7Workstation-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.aarch64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.5.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.aarch64"
},
"product_reference": "java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"relates_to_product_reference": "7Workstation-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.5.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.ppc64"
},
"product_reference": "java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"relates_to_product_reference": "7Workstation-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.ppc64le as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.5.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.ppc64le"
},
"product_reference": "java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"relates_to_product_reference": "7Workstation-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.s390x as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.5.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.s390x"
},
"product_reference": "java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"relates_to_product_reference": "7Workstation-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.5.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.x86_64"
},
"product_reference": "java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"relates_to_product_reference": "7Workstation-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.aarch64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.5.Z:java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.aarch64"
},
"product_reference": "java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"relates_to_product_reference": "7Workstation-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.5.Z:java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.ppc64"
},
"product_reference": "java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"relates_to_product_reference": "7Workstation-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.ppc64le as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.5.Z:java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.ppc64le"
},
"product_reference": "java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"relates_to_product_reference": "7Workstation-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.s390x as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.5.Z:java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.s390x"
},
"product_reference": "java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"relates_to_product_reference": "7Workstation-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.5.Z:java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.x86_64"
},
"product_reference": "java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"relates_to_product_reference": "7Workstation-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.aarch64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.5.Z:java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.aarch64"
},
"product_reference": "java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"relates_to_product_reference": "7Workstation-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.5.Z:java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.ppc64"
},
"product_reference": "java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"relates_to_product_reference": "7Workstation-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.ppc64le as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.5.Z:java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.ppc64le"
},
"product_reference": "java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"relates_to_product_reference": "7Workstation-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.s390x as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.5.Z:java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.s390x"
},
"product_reference": "java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"relates_to_product_reference": "7Workstation-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.5.Z:java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.x86_64"
},
"product_reference": "java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"relates_to_product_reference": "7Workstation-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.aarch64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.5.Z:java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.aarch64"
},
"product_reference": "java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"relates_to_product_reference": "7Workstation-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.5.Z:java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.ppc64"
},
"product_reference": "java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"relates_to_product_reference": "7Workstation-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.ppc64le as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.5.Z:java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.ppc64le"
},
"product_reference": "java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"relates_to_product_reference": "7Workstation-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.s390x as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.5.Z:java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.s390x"
},
"product_reference": "java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"relates_to_product_reference": "7Workstation-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.5.Z:java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.x86_64"
},
"product_reference": "java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"relates_to_product_reference": "7Workstation-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-javadoc-1:1.7.0.191-2.6.15.4.el7_5.noarch as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.5.Z:java-1.7.0-openjdk-javadoc-1:1.7.0.191-2.6.15.4.el7_5.noarch"
},
"product_reference": "java-1.7.0-openjdk-javadoc-1:1.7.0.191-2.6.15.4.el7_5.noarch",
"relates_to_product_reference": "7Workstation-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.aarch64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.5.Z:java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.aarch64"
},
"product_reference": "java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"relates_to_product_reference": "7Workstation-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.5.Z:java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.ppc64"
},
"product_reference": "java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"relates_to_product_reference": "7Workstation-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.ppc64le as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.5.Z:java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.ppc64le"
},
"product_reference": "java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"relates_to_product_reference": "7Workstation-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.s390x as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.5.Z:java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.s390x"
},
"product_reference": "java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"relates_to_product_reference": "7Workstation-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.5.Z:java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.x86_64"
},
"product_reference": "java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"relates_to_product_reference": "7Workstation-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.aarch64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.5.Z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.aarch64"
},
"product_reference": "java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"relates_to_product_reference": "7Workstation-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.ppc64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.5.Z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.ppc64"
},
"product_reference": "java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"relates_to_product_reference": "7Workstation-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.ppc64le as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.5.Z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.ppc64le"
},
"product_reference": "java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"relates_to_product_reference": "7Workstation-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.s390x as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.5.Z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.s390x"
},
"product_reference": "java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"relates_to_product_reference": "7Workstation-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.src as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.5.Z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.src"
},
"product_reference": "java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.src",
"relates_to_product_reference": "7Workstation-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.5.Z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.x86_64"
},
"product_reference": "java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"relates_to_product_reference": "7Workstation-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.aarch64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.5.Z:java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.aarch64"
},
"product_reference": "java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"relates_to_product_reference": "7Workstation-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.ppc64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.5.Z:java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.ppc64"
},
"product_reference": "java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"relates_to_product_reference": "7Workstation-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.ppc64le as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.5.Z:java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.ppc64le"
},
"product_reference": "java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"relates_to_product_reference": "7Workstation-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.s390x as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.5.Z:java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.s390x"
},
"product_reference": "java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"relates_to_product_reference": "7Workstation-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.5.Z:java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.x86_64"
},
"product_reference": "java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"relates_to_product_reference": "7Workstation-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.aarch64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.5.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.aarch64"
},
"product_reference": "java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"relates_to_product_reference": "7Workstation-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.ppc64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.5.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.ppc64"
},
"product_reference": "java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"relates_to_product_reference": "7Workstation-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.ppc64le as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.5.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.ppc64le"
},
"product_reference": "java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"relates_to_product_reference": "7Workstation-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.s390x as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.5.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.s390x"
},
"product_reference": "java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"relates_to_product_reference": "7Workstation-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.5.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.x86_64"
},
"product_reference": "java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"relates_to_product_reference": "7Workstation-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.aarch64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.5.Z:java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.aarch64"
},
"product_reference": "java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"relates_to_product_reference": "7Workstation-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.ppc64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.5.Z:java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.ppc64"
},
"product_reference": "java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"relates_to_product_reference": "7Workstation-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.ppc64le as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.5.Z:java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.ppc64le"
},
"product_reference": "java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"relates_to_product_reference": "7Workstation-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.s390x as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.5.Z:java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.s390x"
},
"product_reference": "java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"relates_to_product_reference": "7Workstation-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.5.Z:java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.x86_64"
},
"product_reference": "java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"relates_to_product_reference": "7Workstation-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.aarch64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.5.Z:java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.aarch64"
},
"product_reference": "java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"relates_to_product_reference": "7Workstation-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.ppc64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.5.Z:java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.ppc64"
},
"product_reference": "java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"relates_to_product_reference": "7Workstation-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.ppc64le as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.5.Z:java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.ppc64le"
},
"product_reference": "java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"relates_to_product_reference": "7Workstation-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.s390x as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.5.Z:java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.s390x"
},
"product_reference": "java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"relates_to_product_reference": "7Workstation-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.5.Z:java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.x86_64"
},
"product_reference": "java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"relates_to_product_reference": "7Workstation-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.aarch64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.5.Z:java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.aarch64"
},
"product_reference": "java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"relates_to_product_reference": "7Workstation-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.ppc64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.5.Z:java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.ppc64"
},
"product_reference": "java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"relates_to_product_reference": "7Workstation-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.ppc64le as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.5.Z:java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.ppc64le"
},
"product_reference": "java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"relates_to_product_reference": "7Workstation-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.s390x as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.5.Z:java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.s390x"
},
"product_reference": "java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"relates_to_product_reference": "7Workstation-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.5.Z:java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.x86_64"
},
"product_reference": "java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"relates_to_product_reference": "7Workstation-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-javadoc-1:1.7.0.191-2.6.15.4.el7_5.noarch as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.5.Z:java-1.7.0-openjdk-javadoc-1:1.7.0.191-2.6.15.4.el7_5.noarch"
},
"product_reference": "java-1.7.0-openjdk-javadoc-1:1.7.0.191-2.6.15.4.el7_5.noarch",
"relates_to_product_reference": "7Workstation-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.aarch64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.5.Z:java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.aarch64"
},
"product_reference": "java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"relates_to_product_reference": "7Workstation-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.ppc64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.5.Z:java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.ppc64"
},
"product_reference": "java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"relates_to_product_reference": "7Workstation-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.ppc64le as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.5.Z:java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.ppc64le"
},
"product_reference": "java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"relates_to_product_reference": "7Workstation-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.s390x as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.5.Z:java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.s390x"
},
"product_reference": "java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"relates_to_product_reference": "7Workstation-optional-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.5.Z:java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.x86_64"
},
"product_reference": "java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"relates_to_product_reference": "7Workstation-optional-7.5.Z"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2018-2952",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2018-07-11T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1600925"
}
],
"notes": [
{
"category": "description",
"text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Concurrency). Supported versions that are affected are Java SE: 6u191, 7u181, 8u172 and 10.0.1; Java SE Embedded: 8u171; JRockit: R28.3.18. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 3.7 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK: insufficient index validation in PatternSyntaxException getMessage() (Concurrency, 8199547)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Client-7.5.Z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"7Client-7.5.Z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"7Client-7.5.Z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"7Client-7.5.Z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"7Client-7.5.Z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.src",
"7Client-7.5.Z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"7Client-7.5.Z:java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"7Client-7.5.Z:java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"7Client-7.5.Z:java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"7Client-7.5.Z:java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"7Client-7.5.Z:java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"7Client-7.5.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"7Client-7.5.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"7Client-7.5.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"7Client-7.5.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"7Client-7.5.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"7Client-7.5.Z:java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"7Client-7.5.Z:java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"7Client-7.5.Z:java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"7Client-7.5.Z:java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"7Client-7.5.Z:java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"7Client-7.5.Z:java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"7Client-7.5.Z:java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"7Client-7.5.Z:java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"7Client-7.5.Z:java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"7Client-7.5.Z:java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"7Client-7.5.Z:java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"7Client-7.5.Z:java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"7Client-7.5.Z:java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"7Client-7.5.Z:java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"7Client-7.5.Z:java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"7Client-7.5.Z:java-1.7.0-openjdk-javadoc-1:1.7.0.191-2.6.15.4.el7_5.noarch",
"7Client-7.5.Z:java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"7Client-7.5.Z:java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"7Client-7.5.Z:java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"7Client-7.5.Z:java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"7Client-7.5.Z:java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"7Client-optional-7.5.Z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"7Client-optional-7.5.Z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"7Client-optional-7.5.Z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"7Client-optional-7.5.Z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"7Client-optional-7.5.Z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.src",
"7Client-optional-7.5.Z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"7Client-optional-7.5.Z:java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"7Client-optional-7.5.Z:java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"7Client-optional-7.5.Z:java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"7Client-optional-7.5.Z:java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"7Client-optional-7.5.Z:java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"7Client-optional-7.5.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"7Client-optional-7.5.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"7Client-optional-7.5.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"7Client-optional-7.5.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"7Client-optional-7.5.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"7Client-optional-7.5.Z:java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"7Client-optional-7.5.Z:java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"7Client-optional-7.5.Z:java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"7Client-optional-7.5.Z:java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"7Client-optional-7.5.Z:java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"7Client-optional-7.5.Z:java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"7Client-optional-7.5.Z:java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"7Client-optional-7.5.Z:java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"7Client-optional-7.5.Z:java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"7Client-optional-7.5.Z:java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"7Client-optional-7.5.Z:java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"7Client-optional-7.5.Z:java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"7Client-optional-7.5.Z:java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"7Client-optional-7.5.Z:java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"7Client-optional-7.5.Z:java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"7Client-optional-7.5.Z:java-1.7.0-openjdk-javadoc-1:1.7.0.191-2.6.15.4.el7_5.noarch",
"7Client-optional-7.5.Z:java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"7Client-optional-7.5.Z:java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"7Client-optional-7.5.Z:java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"7Client-optional-7.5.Z:java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"7Client-optional-7.5.Z:java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"7ComputeNode-7.5.Z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"7ComputeNode-7.5.Z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"7ComputeNode-7.5.Z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"7ComputeNode-7.5.Z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"7ComputeNode-7.5.Z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.src",
"7ComputeNode-7.5.Z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"7ComputeNode-7.5.Z:java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"7ComputeNode-7.5.Z:java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"7ComputeNode-7.5.Z:java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"7ComputeNode-7.5.Z:java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"7ComputeNode-7.5.Z:java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"7ComputeNode-7.5.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"7ComputeNode-7.5.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"7ComputeNode-7.5.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"7ComputeNode-7.5.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"7ComputeNode-7.5.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"7ComputeNode-7.5.Z:java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"7ComputeNode-7.5.Z:java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"7ComputeNode-7.5.Z:java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"7ComputeNode-7.5.Z:java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"7ComputeNode-7.5.Z:java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"7ComputeNode-7.5.Z:java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"7ComputeNode-7.5.Z:java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"7ComputeNode-7.5.Z:java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"7ComputeNode-7.5.Z:java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"7ComputeNode-7.5.Z:java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"7ComputeNode-7.5.Z:java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"7ComputeNode-7.5.Z:java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"7ComputeNode-7.5.Z:java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"7ComputeNode-7.5.Z:java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"7ComputeNode-7.5.Z:java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"7ComputeNode-7.5.Z:java-1.7.0-openjdk-javadoc-1:1.7.0.191-2.6.15.4.el7_5.noarch",
"7ComputeNode-7.5.Z:java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"7ComputeNode-7.5.Z:java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"7ComputeNode-7.5.Z:java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"7ComputeNode-7.5.Z:java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"7ComputeNode-7.5.Z:java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"7ComputeNode-optional-7.5.Z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"7ComputeNode-optional-7.5.Z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"7ComputeNode-optional-7.5.Z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"7ComputeNode-optional-7.5.Z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"7ComputeNode-optional-7.5.Z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.src",
"7ComputeNode-optional-7.5.Z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"7ComputeNode-optional-7.5.Z:java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"7ComputeNode-optional-7.5.Z:java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"7ComputeNode-optional-7.5.Z:java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"7ComputeNode-optional-7.5.Z:java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"7ComputeNode-optional-7.5.Z:java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"7ComputeNode-optional-7.5.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"7ComputeNode-optional-7.5.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"7ComputeNode-optional-7.5.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"7ComputeNode-optional-7.5.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"7ComputeNode-optional-7.5.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"7ComputeNode-optional-7.5.Z:java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"7ComputeNode-optional-7.5.Z:java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"7ComputeNode-optional-7.5.Z:java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"7ComputeNode-optional-7.5.Z:java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"7ComputeNode-optional-7.5.Z:java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"7ComputeNode-optional-7.5.Z:java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"7ComputeNode-optional-7.5.Z:java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"7ComputeNode-optional-7.5.Z:java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"7ComputeNode-optional-7.5.Z:java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"7ComputeNode-optional-7.5.Z:java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"7ComputeNode-optional-7.5.Z:java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"7ComputeNode-optional-7.5.Z:java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"7ComputeNode-optional-7.5.Z:java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"7ComputeNode-optional-7.5.Z:java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"7ComputeNode-optional-7.5.Z:java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"7ComputeNode-optional-7.5.Z:java-1.7.0-openjdk-javadoc-1:1.7.0.191-2.6.15.4.el7_5.noarch",
"7ComputeNode-optional-7.5.Z:java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"7ComputeNode-optional-7.5.Z:java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"7ComputeNode-optional-7.5.Z:java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"7ComputeNode-optional-7.5.Z:java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"7ComputeNode-optional-7.5.Z:java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"7Server-7.5.Z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"7Server-7.5.Z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"7Server-7.5.Z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"7Server-7.5.Z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"7Server-7.5.Z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.src",
"7Server-7.5.Z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"7Server-7.5.Z:java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"7Server-7.5.Z:java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"7Server-7.5.Z:java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"7Server-7.5.Z:java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"7Server-7.5.Z:java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"7Server-7.5.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"7Server-7.5.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"7Server-7.5.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"7Server-7.5.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"7Server-7.5.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"7Server-7.5.Z:java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"7Server-7.5.Z:java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"7Server-7.5.Z:java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"7Server-7.5.Z:java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"7Server-7.5.Z:java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"7Server-7.5.Z:java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"7Server-7.5.Z:java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"7Server-7.5.Z:java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"7Server-7.5.Z:java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"7Server-7.5.Z:java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"7Server-7.5.Z:java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"7Server-7.5.Z:java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"7Server-7.5.Z:java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"7Server-7.5.Z:java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"7Server-7.5.Z:java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"7Server-7.5.Z:java-1.7.0-openjdk-javadoc-1:1.7.0.191-2.6.15.4.el7_5.noarch",
"7Server-7.5.Z:java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"7Server-7.5.Z:java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"7Server-7.5.Z:java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"7Server-7.5.Z:java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"7Server-7.5.Z:java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"7Server-Alt-7.5.Z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"7Server-Alt-7.5.Z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"7Server-Alt-7.5.Z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"7Server-Alt-7.5.Z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"7Server-Alt-7.5.Z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.src",
"7Server-Alt-7.5.Z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"7Server-Alt-7.5.Z:java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"7Server-Alt-7.5.Z:java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"7Server-Alt-7.5.Z:java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"7Server-Alt-7.5.Z:java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"7Server-Alt-7.5.Z:java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"7Server-Alt-7.5.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"7Server-Alt-7.5.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"7Server-Alt-7.5.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"7Server-Alt-7.5.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"7Server-Alt-7.5.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"7Server-Alt-7.5.Z:java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"7Server-Alt-7.5.Z:java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"7Server-Alt-7.5.Z:java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"7Server-Alt-7.5.Z:java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"7Server-Alt-7.5.Z:java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"7Server-Alt-7.5.Z:java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"7Server-Alt-7.5.Z:java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"7Server-Alt-7.5.Z:java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"7Server-Alt-7.5.Z:java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"7Server-Alt-7.5.Z:java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"7Server-Alt-7.5.Z:java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"7Server-Alt-7.5.Z:java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"7Server-Alt-7.5.Z:java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"7Server-Alt-7.5.Z:java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"7Server-Alt-7.5.Z:java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"7Server-Alt-7.5.Z:java-1.7.0-openjdk-javadoc-1:1.7.0.191-2.6.15.4.el7_5.noarch",
"7Server-Alt-7.5.Z:java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"7Server-Alt-7.5.Z:java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"7Server-Alt-7.5.Z:java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"7Server-Alt-7.5.Z:java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"7Server-Alt-7.5.Z:java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"7Server-optional-7.5.Z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"7Server-optional-7.5.Z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"7Server-optional-7.5.Z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"7Server-optional-7.5.Z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"7Server-optional-7.5.Z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.src",
"7Server-optional-7.5.Z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"7Server-optional-7.5.Z:java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"7Server-optional-7.5.Z:java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"7Server-optional-7.5.Z:java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"7Server-optional-7.5.Z:java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"7Server-optional-7.5.Z:java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"7Server-optional-7.5.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"7Server-optional-7.5.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"7Server-optional-7.5.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"7Server-optional-7.5.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"7Server-optional-7.5.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"7Server-optional-7.5.Z:java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"7Server-optional-7.5.Z:java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"7Server-optional-7.5.Z:java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"7Server-optional-7.5.Z:java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"7Server-optional-7.5.Z:java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"7Server-optional-7.5.Z:java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"7Server-optional-7.5.Z:java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"7Server-optional-7.5.Z:java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"7Server-optional-7.5.Z:java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"7Server-optional-7.5.Z:java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"7Server-optional-7.5.Z:java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"7Server-optional-7.5.Z:java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"7Server-optional-7.5.Z:java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"7Server-optional-7.5.Z:java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"7Server-optional-7.5.Z:java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"7Server-optional-7.5.Z:java-1.7.0-openjdk-javadoc-1:1.7.0.191-2.6.15.4.el7_5.noarch",
"7Server-optional-7.5.Z:java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"7Server-optional-7.5.Z:java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"7Server-optional-7.5.Z:java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"7Server-optional-7.5.Z:java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"7Server-optional-7.5.Z:java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"7Server-optional-Alt-7.5.Z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"7Server-optional-Alt-7.5.Z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"7Server-optional-Alt-7.5.Z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"7Server-optional-Alt-7.5.Z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"7Server-optional-Alt-7.5.Z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.src",
"7Server-optional-Alt-7.5.Z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"7Server-optional-Alt-7.5.Z:java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"7Server-optional-Alt-7.5.Z:java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"7Server-optional-Alt-7.5.Z:java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"7Server-optional-Alt-7.5.Z:java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"7Server-optional-Alt-7.5.Z:java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"7Server-optional-Alt-7.5.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"7Server-optional-Alt-7.5.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"7Server-optional-Alt-7.5.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"7Server-optional-Alt-7.5.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"7Server-optional-Alt-7.5.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"7Server-optional-Alt-7.5.Z:java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"7Server-optional-Alt-7.5.Z:java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"7Server-optional-Alt-7.5.Z:java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"7Server-optional-Alt-7.5.Z:java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"7Server-optional-Alt-7.5.Z:java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"7Server-optional-Alt-7.5.Z:java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"7Server-optional-Alt-7.5.Z:java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"7Server-optional-Alt-7.5.Z:java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"7Server-optional-Alt-7.5.Z:java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"7Server-optional-Alt-7.5.Z:java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"7Server-optional-Alt-7.5.Z:java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"7Server-optional-Alt-7.5.Z:java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"7Server-optional-Alt-7.5.Z:java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"7Server-optional-Alt-7.5.Z:java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"7Server-optional-Alt-7.5.Z:java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"7Server-optional-Alt-7.5.Z:java-1.7.0-openjdk-javadoc-1:1.7.0.191-2.6.15.4.el7_5.noarch",
"7Server-optional-Alt-7.5.Z:java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"7Server-optional-Alt-7.5.Z:java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"7Server-optional-Alt-7.5.Z:java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"7Server-optional-Alt-7.5.Z:java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"7Server-optional-Alt-7.5.Z:java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"7Workstation-7.5.Z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"7Workstation-7.5.Z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"7Workstation-7.5.Z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"7Workstation-7.5.Z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"7Workstation-7.5.Z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.src",
"7Workstation-7.5.Z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"7Workstation-7.5.Z:java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"7Workstation-7.5.Z:java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"7Workstation-7.5.Z:java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"7Workstation-7.5.Z:java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"7Workstation-7.5.Z:java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"7Workstation-7.5.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"7Workstation-7.5.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"7Workstation-7.5.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"7Workstation-7.5.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"7Workstation-7.5.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"7Workstation-7.5.Z:java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"7Workstation-7.5.Z:java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"7Workstation-7.5.Z:java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"7Workstation-7.5.Z:java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"7Workstation-7.5.Z:java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"7Workstation-7.5.Z:java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"7Workstation-7.5.Z:java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"7Workstation-7.5.Z:java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"7Workstation-7.5.Z:java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"7Workstation-7.5.Z:java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"7Workstation-7.5.Z:java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"7Workstation-7.5.Z:java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"7Workstation-7.5.Z:java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"7Workstation-7.5.Z:java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"7Workstation-7.5.Z:java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"7Workstation-7.5.Z:java-1.7.0-openjdk-javadoc-1:1.7.0.191-2.6.15.4.el7_5.noarch",
"7Workstation-7.5.Z:java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"7Workstation-7.5.Z:java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"7Workstation-7.5.Z:java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"7Workstation-7.5.Z:java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"7Workstation-7.5.Z:java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"7Workstation-optional-7.5.Z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"7Workstation-optional-7.5.Z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"7Workstation-optional-7.5.Z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"7Workstation-optional-7.5.Z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"7Workstation-optional-7.5.Z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.src",
"7Workstation-optional-7.5.Z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"7Workstation-optional-7.5.Z:java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"7Workstation-optional-7.5.Z:java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"7Workstation-optional-7.5.Z:java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"7Workstation-optional-7.5.Z:java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"7Workstation-optional-7.5.Z:java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"7Workstation-optional-7.5.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"7Workstation-optional-7.5.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"7Workstation-optional-7.5.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"7Workstation-optional-7.5.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"7Workstation-optional-7.5.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"7Workstation-optional-7.5.Z:java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"7Workstation-optional-7.5.Z:java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"7Workstation-optional-7.5.Z:java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"7Workstation-optional-7.5.Z:java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"7Workstation-optional-7.5.Z:java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"7Workstation-optional-7.5.Z:java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"7Workstation-optional-7.5.Z:java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"7Workstation-optional-7.5.Z:java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"7Workstation-optional-7.5.Z:java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"7Workstation-optional-7.5.Z:java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"7Workstation-optional-7.5.Z:java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"7Workstation-optional-7.5.Z:java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"7Workstation-optional-7.5.Z:java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"7Workstation-optional-7.5.Z:java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"7Workstation-optional-7.5.Z:java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"7Workstation-optional-7.5.Z:java-1.7.0-openjdk-javadoc-1:1.7.0.191-2.6.15.4.el7_5.noarch",
"7Workstation-optional-7.5.Z:java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"7Workstation-optional-7.5.Z:java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"7Workstation-optional-7.5.Z:java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"7Workstation-optional-7.5.Z:java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"7Workstation-optional-7.5.Z:java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-2952"
},
{
"category": "external",
"summary": "RHBZ#1600925",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1600925"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-2952",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-2952"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2952",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2952"
}
],
"release_date": "2018-07-17T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-07-30T15:35:56+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of OpenJDK Java must be restarted for this update to take effect.",
"product_ids": [
"7Client-7.5.Z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"7Client-7.5.Z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"7Client-7.5.Z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"7Client-7.5.Z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"7Client-7.5.Z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.src",
"7Client-7.5.Z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"7Client-7.5.Z:java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"7Client-7.5.Z:java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"7Client-7.5.Z:java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"7Client-7.5.Z:java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"7Client-7.5.Z:java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"7Client-7.5.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"7Client-7.5.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"7Client-7.5.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"7Client-7.5.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"7Client-7.5.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"7Client-7.5.Z:java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"7Client-7.5.Z:java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"7Client-7.5.Z:java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"7Client-7.5.Z:java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"7Client-7.5.Z:java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"7Client-7.5.Z:java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"7Client-7.5.Z:java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"7Client-7.5.Z:java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"7Client-7.5.Z:java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"7Client-7.5.Z:java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"7Client-7.5.Z:java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"7Client-7.5.Z:java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"7Client-7.5.Z:java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"7Client-7.5.Z:java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"7Client-7.5.Z:java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"7Client-7.5.Z:java-1.7.0-openjdk-javadoc-1:1.7.0.191-2.6.15.4.el7_5.noarch",
"7Client-7.5.Z:java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"7Client-7.5.Z:java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"7Client-7.5.Z:java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"7Client-7.5.Z:java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"7Client-7.5.Z:java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"7Client-optional-7.5.Z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"7Client-optional-7.5.Z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"7Client-optional-7.5.Z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"7Client-optional-7.5.Z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"7Client-optional-7.5.Z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.src",
"7Client-optional-7.5.Z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"7Client-optional-7.5.Z:java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"7Client-optional-7.5.Z:java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"7Client-optional-7.5.Z:java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"7Client-optional-7.5.Z:java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"7Client-optional-7.5.Z:java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"7Client-optional-7.5.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"7Client-optional-7.5.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"7Client-optional-7.5.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"7Client-optional-7.5.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"7Client-optional-7.5.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"7Client-optional-7.5.Z:java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"7Client-optional-7.5.Z:java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"7Client-optional-7.5.Z:java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"7Client-optional-7.5.Z:java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"7Client-optional-7.5.Z:java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"7Client-optional-7.5.Z:java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"7Client-optional-7.5.Z:java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"7Client-optional-7.5.Z:java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"7Client-optional-7.5.Z:java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"7Client-optional-7.5.Z:java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"7Client-optional-7.5.Z:java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"7Client-optional-7.5.Z:java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"7Client-optional-7.5.Z:java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"7Client-optional-7.5.Z:java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"7Client-optional-7.5.Z:java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"7Client-optional-7.5.Z:java-1.7.0-openjdk-javadoc-1:1.7.0.191-2.6.15.4.el7_5.noarch",
"7Client-optional-7.5.Z:java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"7Client-optional-7.5.Z:java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"7Client-optional-7.5.Z:java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"7Client-optional-7.5.Z:java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"7Client-optional-7.5.Z:java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"7ComputeNode-7.5.Z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"7ComputeNode-7.5.Z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"7ComputeNode-7.5.Z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"7ComputeNode-7.5.Z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"7ComputeNode-7.5.Z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.src",
"7ComputeNode-7.5.Z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"7ComputeNode-7.5.Z:java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"7ComputeNode-7.5.Z:java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"7ComputeNode-7.5.Z:java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"7ComputeNode-7.5.Z:java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"7ComputeNode-7.5.Z:java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"7ComputeNode-7.5.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"7ComputeNode-7.5.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"7ComputeNode-7.5.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"7ComputeNode-7.5.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"7ComputeNode-7.5.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"7ComputeNode-7.5.Z:java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"7ComputeNode-7.5.Z:java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"7ComputeNode-7.5.Z:java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"7ComputeNode-7.5.Z:java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"7ComputeNode-7.5.Z:java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"7ComputeNode-7.5.Z:java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"7ComputeNode-7.5.Z:java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"7ComputeNode-7.5.Z:java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"7ComputeNode-7.5.Z:java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"7ComputeNode-7.5.Z:java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"7ComputeNode-7.5.Z:java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"7ComputeNode-7.5.Z:java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"7ComputeNode-7.5.Z:java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"7ComputeNode-7.5.Z:java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"7ComputeNode-7.5.Z:java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"7ComputeNode-7.5.Z:java-1.7.0-openjdk-javadoc-1:1.7.0.191-2.6.15.4.el7_5.noarch",
"7ComputeNode-7.5.Z:java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"7ComputeNode-7.5.Z:java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"7ComputeNode-7.5.Z:java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"7ComputeNode-7.5.Z:java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"7ComputeNode-7.5.Z:java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"7ComputeNode-optional-7.5.Z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"7ComputeNode-optional-7.5.Z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"7ComputeNode-optional-7.5.Z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"7ComputeNode-optional-7.5.Z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"7ComputeNode-optional-7.5.Z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.src",
"7ComputeNode-optional-7.5.Z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"7ComputeNode-optional-7.5.Z:java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"7ComputeNode-optional-7.5.Z:java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"7ComputeNode-optional-7.5.Z:java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"7ComputeNode-optional-7.5.Z:java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"7ComputeNode-optional-7.5.Z:java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"7ComputeNode-optional-7.5.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"7ComputeNode-optional-7.5.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"7ComputeNode-optional-7.5.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"7ComputeNode-optional-7.5.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"7ComputeNode-optional-7.5.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"7ComputeNode-optional-7.5.Z:java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"7ComputeNode-optional-7.5.Z:java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"7ComputeNode-optional-7.5.Z:java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"7ComputeNode-optional-7.5.Z:java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"7ComputeNode-optional-7.5.Z:java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"7ComputeNode-optional-7.5.Z:java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"7ComputeNode-optional-7.5.Z:java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"7ComputeNode-optional-7.5.Z:java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"7ComputeNode-optional-7.5.Z:java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"7ComputeNode-optional-7.5.Z:java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"7ComputeNode-optional-7.5.Z:java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"7ComputeNode-optional-7.5.Z:java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"7ComputeNode-optional-7.5.Z:java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"7ComputeNode-optional-7.5.Z:java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"7ComputeNode-optional-7.5.Z:java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"7ComputeNode-optional-7.5.Z:java-1.7.0-openjdk-javadoc-1:1.7.0.191-2.6.15.4.el7_5.noarch",
"7ComputeNode-optional-7.5.Z:java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"7ComputeNode-optional-7.5.Z:java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"7ComputeNode-optional-7.5.Z:java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"7ComputeNode-optional-7.5.Z:java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"7ComputeNode-optional-7.5.Z:java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"7Server-7.5.Z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"7Server-7.5.Z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"7Server-7.5.Z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"7Server-7.5.Z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"7Server-7.5.Z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.src",
"7Server-7.5.Z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"7Server-7.5.Z:java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"7Server-7.5.Z:java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"7Server-7.5.Z:java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"7Server-7.5.Z:java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"7Server-7.5.Z:java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"7Server-7.5.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"7Server-7.5.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"7Server-7.5.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"7Server-7.5.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"7Server-7.5.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"7Server-7.5.Z:java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"7Server-7.5.Z:java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"7Server-7.5.Z:java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"7Server-7.5.Z:java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"7Server-7.5.Z:java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"7Server-7.5.Z:java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"7Server-7.5.Z:java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"7Server-7.5.Z:java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"7Server-7.5.Z:java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"7Server-7.5.Z:java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"7Server-7.5.Z:java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"7Server-7.5.Z:java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"7Server-7.5.Z:java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"7Server-7.5.Z:java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"7Server-7.5.Z:java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"7Server-7.5.Z:java-1.7.0-openjdk-javadoc-1:1.7.0.191-2.6.15.4.el7_5.noarch",
"7Server-7.5.Z:java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"7Server-7.5.Z:java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"7Server-7.5.Z:java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"7Server-7.5.Z:java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"7Server-7.5.Z:java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"7Server-Alt-7.5.Z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"7Server-Alt-7.5.Z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"7Server-Alt-7.5.Z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"7Server-Alt-7.5.Z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"7Server-Alt-7.5.Z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.src",
"7Server-Alt-7.5.Z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"7Server-Alt-7.5.Z:java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"7Server-Alt-7.5.Z:java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"7Server-Alt-7.5.Z:java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"7Server-Alt-7.5.Z:java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"7Server-Alt-7.5.Z:java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"7Server-Alt-7.5.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"7Server-Alt-7.5.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"7Server-Alt-7.5.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"7Server-Alt-7.5.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"7Server-Alt-7.5.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"7Server-Alt-7.5.Z:java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"7Server-Alt-7.5.Z:java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"7Server-Alt-7.5.Z:java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"7Server-Alt-7.5.Z:java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"7Server-Alt-7.5.Z:java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"7Server-Alt-7.5.Z:java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"7Server-Alt-7.5.Z:java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"7Server-Alt-7.5.Z:java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"7Server-Alt-7.5.Z:java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"7Server-Alt-7.5.Z:java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"7Server-Alt-7.5.Z:java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"7Server-Alt-7.5.Z:java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"7Server-Alt-7.5.Z:java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"7Server-Alt-7.5.Z:java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"7Server-Alt-7.5.Z:java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"7Server-Alt-7.5.Z:java-1.7.0-openjdk-javadoc-1:1.7.0.191-2.6.15.4.el7_5.noarch",
"7Server-Alt-7.5.Z:java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"7Server-Alt-7.5.Z:java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"7Server-Alt-7.5.Z:java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"7Server-Alt-7.5.Z:java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"7Server-Alt-7.5.Z:java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"7Server-optional-7.5.Z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"7Server-optional-7.5.Z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"7Server-optional-7.5.Z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"7Server-optional-7.5.Z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"7Server-optional-7.5.Z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.src",
"7Server-optional-7.5.Z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"7Server-optional-7.5.Z:java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"7Server-optional-7.5.Z:java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"7Server-optional-7.5.Z:java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"7Server-optional-7.5.Z:java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"7Server-optional-7.5.Z:java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"7Server-optional-7.5.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"7Server-optional-7.5.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"7Server-optional-7.5.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"7Server-optional-7.5.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"7Server-optional-7.5.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"7Server-optional-7.5.Z:java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"7Server-optional-7.5.Z:java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"7Server-optional-7.5.Z:java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"7Server-optional-7.5.Z:java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"7Server-optional-7.5.Z:java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"7Server-optional-7.5.Z:java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"7Server-optional-7.5.Z:java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"7Server-optional-7.5.Z:java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"7Server-optional-7.5.Z:java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"7Server-optional-7.5.Z:java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"7Server-optional-7.5.Z:java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"7Server-optional-7.5.Z:java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"7Server-optional-7.5.Z:java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"7Server-optional-7.5.Z:java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"7Server-optional-7.5.Z:java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"7Server-optional-7.5.Z:java-1.7.0-openjdk-javadoc-1:1.7.0.191-2.6.15.4.el7_5.noarch",
"7Server-optional-7.5.Z:java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"7Server-optional-7.5.Z:java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"7Server-optional-7.5.Z:java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"7Server-optional-7.5.Z:java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"7Server-optional-7.5.Z:java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"7Server-optional-Alt-7.5.Z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"7Server-optional-Alt-7.5.Z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"7Server-optional-Alt-7.5.Z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"7Server-optional-Alt-7.5.Z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"7Server-optional-Alt-7.5.Z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.src",
"7Server-optional-Alt-7.5.Z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"7Server-optional-Alt-7.5.Z:java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"7Server-optional-Alt-7.5.Z:java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"7Server-optional-Alt-7.5.Z:java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"7Server-optional-Alt-7.5.Z:java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"7Server-optional-Alt-7.5.Z:java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"7Server-optional-Alt-7.5.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"7Server-optional-Alt-7.5.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"7Server-optional-Alt-7.5.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"7Server-optional-Alt-7.5.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"7Server-optional-Alt-7.5.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"7Server-optional-Alt-7.5.Z:java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"7Server-optional-Alt-7.5.Z:java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"7Server-optional-Alt-7.5.Z:java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"7Server-optional-Alt-7.5.Z:java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"7Server-optional-Alt-7.5.Z:java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"7Server-optional-Alt-7.5.Z:java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"7Server-optional-Alt-7.5.Z:java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"7Server-optional-Alt-7.5.Z:java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"7Server-optional-Alt-7.5.Z:java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"7Server-optional-Alt-7.5.Z:java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"7Server-optional-Alt-7.5.Z:java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"7Server-optional-Alt-7.5.Z:java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"7Server-optional-Alt-7.5.Z:java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"7Server-optional-Alt-7.5.Z:java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"7Server-optional-Alt-7.5.Z:java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"7Server-optional-Alt-7.5.Z:java-1.7.0-openjdk-javadoc-1:1.7.0.191-2.6.15.4.el7_5.noarch",
"7Server-optional-Alt-7.5.Z:java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"7Server-optional-Alt-7.5.Z:java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"7Server-optional-Alt-7.5.Z:java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"7Server-optional-Alt-7.5.Z:java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"7Server-optional-Alt-7.5.Z:java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"7Workstation-7.5.Z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"7Workstation-7.5.Z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"7Workstation-7.5.Z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"7Workstation-7.5.Z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"7Workstation-7.5.Z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.src",
"7Workstation-7.5.Z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"7Workstation-7.5.Z:java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"7Workstation-7.5.Z:java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"7Workstation-7.5.Z:java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"7Workstation-7.5.Z:java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"7Workstation-7.5.Z:java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"7Workstation-7.5.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"7Workstation-7.5.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"7Workstation-7.5.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"7Workstation-7.5.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"7Workstation-7.5.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"7Workstation-7.5.Z:java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"7Workstation-7.5.Z:java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"7Workstation-7.5.Z:java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"7Workstation-7.5.Z:java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"7Workstation-7.5.Z:java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"7Workstation-7.5.Z:java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"7Workstation-7.5.Z:java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"7Workstation-7.5.Z:java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"7Workstation-7.5.Z:java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"7Workstation-7.5.Z:java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"7Workstation-7.5.Z:java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"7Workstation-7.5.Z:java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"7Workstation-7.5.Z:java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"7Workstation-7.5.Z:java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"7Workstation-7.5.Z:java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"7Workstation-7.5.Z:java-1.7.0-openjdk-javadoc-1:1.7.0.191-2.6.15.4.el7_5.noarch",
"7Workstation-7.5.Z:java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"7Workstation-7.5.Z:java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"7Workstation-7.5.Z:java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"7Workstation-7.5.Z:java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"7Workstation-7.5.Z:java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"7Workstation-optional-7.5.Z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"7Workstation-optional-7.5.Z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"7Workstation-optional-7.5.Z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"7Workstation-optional-7.5.Z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"7Workstation-optional-7.5.Z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.src",
"7Workstation-optional-7.5.Z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"7Workstation-optional-7.5.Z:java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"7Workstation-optional-7.5.Z:java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"7Workstation-optional-7.5.Z:java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"7Workstation-optional-7.5.Z:java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"7Workstation-optional-7.5.Z:java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"7Workstation-optional-7.5.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"7Workstation-optional-7.5.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"7Workstation-optional-7.5.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"7Workstation-optional-7.5.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"7Workstation-optional-7.5.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"7Workstation-optional-7.5.Z:java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"7Workstation-optional-7.5.Z:java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"7Workstation-optional-7.5.Z:java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"7Workstation-optional-7.5.Z:java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"7Workstation-optional-7.5.Z:java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"7Workstation-optional-7.5.Z:java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"7Workstation-optional-7.5.Z:java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"7Workstation-optional-7.5.Z:java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"7Workstation-optional-7.5.Z:java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"7Workstation-optional-7.5.Z:java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"7Workstation-optional-7.5.Z:java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"7Workstation-optional-7.5.Z:java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"7Workstation-optional-7.5.Z:java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"7Workstation-optional-7.5.Z:java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"7Workstation-optional-7.5.Z:java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"7Workstation-optional-7.5.Z:java-1.7.0-openjdk-javadoc-1:1.7.0.191-2.6.15.4.el7_5.noarch",
"7Workstation-optional-7.5.Z:java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"7Workstation-optional-7.5.Z:java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"7Workstation-optional-7.5.Z:java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"7Workstation-optional-7.5.Z:java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"7Workstation-optional-7.5.Z:java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:2286"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 3.7,
"baseSeverity": "LOW",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"7Client-7.5.Z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"7Client-7.5.Z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"7Client-7.5.Z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"7Client-7.5.Z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"7Client-7.5.Z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.src",
"7Client-7.5.Z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"7Client-7.5.Z:java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"7Client-7.5.Z:java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"7Client-7.5.Z:java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"7Client-7.5.Z:java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"7Client-7.5.Z:java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"7Client-7.5.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"7Client-7.5.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"7Client-7.5.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"7Client-7.5.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"7Client-7.5.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"7Client-7.5.Z:java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"7Client-7.5.Z:java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"7Client-7.5.Z:java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"7Client-7.5.Z:java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"7Client-7.5.Z:java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"7Client-7.5.Z:java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"7Client-7.5.Z:java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"7Client-7.5.Z:java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"7Client-7.5.Z:java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"7Client-7.5.Z:java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"7Client-7.5.Z:java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"7Client-7.5.Z:java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"7Client-7.5.Z:java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"7Client-7.5.Z:java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"7Client-7.5.Z:java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"7Client-7.5.Z:java-1.7.0-openjdk-javadoc-1:1.7.0.191-2.6.15.4.el7_5.noarch",
"7Client-7.5.Z:java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"7Client-7.5.Z:java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"7Client-7.5.Z:java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"7Client-7.5.Z:java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"7Client-7.5.Z:java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"7Client-optional-7.5.Z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"7Client-optional-7.5.Z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"7Client-optional-7.5.Z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"7Client-optional-7.5.Z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"7Client-optional-7.5.Z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.src",
"7Client-optional-7.5.Z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"7Client-optional-7.5.Z:java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"7Client-optional-7.5.Z:java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"7Client-optional-7.5.Z:java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"7Client-optional-7.5.Z:java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"7Client-optional-7.5.Z:java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"7Client-optional-7.5.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"7Client-optional-7.5.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"7Client-optional-7.5.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"7Client-optional-7.5.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"7Client-optional-7.5.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"7Client-optional-7.5.Z:java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"7Client-optional-7.5.Z:java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"7Client-optional-7.5.Z:java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"7Client-optional-7.5.Z:java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"7Client-optional-7.5.Z:java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"7Client-optional-7.5.Z:java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"7Client-optional-7.5.Z:java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"7Client-optional-7.5.Z:java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"7Client-optional-7.5.Z:java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"7Client-optional-7.5.Z:java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"7Client-optional-7.5.Z:java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"7Client-optional-7.5.Z:java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"7Client-optional-7.5.Z:java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"7Client-optional-7.5.Z:java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"7Client-optional-7.5.Z:java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"7Client-optional-7.5.Z:java-1.7.0-openjdk-javadoc-1:1.7.0.191-2.6.15.4.el7_5.noarch",
"7Client-optional-7.5.Z:java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"7Client-optional-7.5.Z:java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"7Client-optional-7.5.Z:java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"7Client-optional-7.5.Z:java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"7Client-optional-7.5.Z:java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"7ComputeNode-7.5.Z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"7ComputeNode-7.5.Z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"7ComputeNode-7.5.Z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"7ComputeNode-7.5.Z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"7ComputeNode-7.5.Z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.src",
"7ComputeNode-7.5.Z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"7ComputeNode-7.5.Z:java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"7ComputeNode-7.5.Z:java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"7ComputeNode-7.5.Z:java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"7ComputeNode-7.5.Z:java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"7ComputeNode-7.5.Z:java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"7ComputeNode-7.5.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"7ComputeNode-7.5.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"7ComputeNode-7.5.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"7ComputeNode-7.5.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"7ComputeNode-7.5.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"7ComputeNode-7.5.Z:java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"7ComputeNode-7.5.Z:java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"7ComputeNode-7.5.Z:java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"7ComputeNode-7.5.Z:java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"7ComputeNode-7.5.Z:java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"7ComputeNode-7.5.Z:java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"7ComputeNode-7.5.Z:java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"7ComputeNode-7.5.Z:java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"7ComputeNode-7.5.Z:java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"7ComputeNode-7.5.Z:java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"7ComputeNode-7.5.Z:java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"7ComputeNode-7.5.Z:java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"7ComputeNode-7.5.Z:java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"7ComputeNode-7.5.Z:java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"7ComputeNode-7.5.Z:java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"7ComputeNode-7.5.Z:java-1.7.0-openjdk-javadoc-1:1.7.0.191-2.6.15.4.el7_5.noarch",
"7ComputeNode-7.5.Z:java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"7ComputeNode-7.5.Z:java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"7ComputeNode-7.5.Z:java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"7ComputeNode-7.5.Z:java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"7ComputeNode-7.5.Z:java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"7ComputeNode-optional-7.5.Z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"7ComputeNode-optional-7.5.Z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"7ComputeNode-optional-7.5.Z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"7ComputeNode-optional-7.5.Z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"7ComputeNode-optional-7.5.Z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.src",
"7ComputeNode-optional-7.5.Z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"7ComputeNode-optional-7.5.Z:java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"7ComputeNode-optional-7.5.Z:java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"7ComputeNode-optional-7.5.Z:java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"7ComputeNode-optional-7.5.Z:java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"7ComputeNode-optional-7.5.Z:java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"7ComputeNode-optional-7.5.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"7ComputeNode-optional-7.5.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"7ComputeNode-optional-7.5.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"7ComputeNode-optional-7.5.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"7ComputeNode-optional-7.5.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"7ComputeNode-optional-7.5.Z:java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"7ComputeNode-optional-7.5.Z:java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"7ComputeNode-optional-7.5.Z:java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"7ComputeNode-optional-7.5.Z:java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"7ComputeNode-optional-7.5.Z:java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"7ComputeNode-optional-7.5.Z:java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"7ComputeNode-optional-7.5.Z:java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"7ComputeNode-optional-7.5.Z:java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"7ComputeNode-optional-7.5.Z:java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"7ComputeNode-optional-7.5.Z:java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"7ComputeNode-optional-7.5.Z:java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"7ComputeNode-optional-7.5.Z:java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"7ComputeNode-optional-7.5.Z:java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"7ComputeNode-optional-7.5.Z:java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"7ComputeNode-optional-7.5.Z:java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"7ComputeNode-optional-7.5.Z:java-1.7.0-openjdk-javadoc-1:1.7.0.191-2.6.15.4.el7_5.noarch",
"7ComputeNode-optional-7.5.Z:java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"7ComputeNode-optional-7.5.Z:java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"7ComputeNode-optional-7.5.Z:java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"7ComputeNode-optional-7.5.Z:java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"7ComputeNode-optional-7.5.Z:java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"7Server-7.5.Z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"7Server-7.5.Z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"7Server-7.5.Z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"7Server-7.5.Z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"7Server-7.5.Z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.src",
"7Server-7.5.Z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"7Server-7.5.Z:java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"7Server-7.5.Z:java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"7Server-7.5.Z:java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"7Server-7.5.Z:java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"7Server-7.5.Z:java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"7Server-7.5.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"7Server-7.5.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"7Server-7.5.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"7Server-7.5.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"7Server-7.5.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"7Server-7.5.Z:java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"7Server-7.5.Z:java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"7Server-7.5.Z:java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"7Server-7.5.Z:java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"7Server-7.5.Z:java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"7Server-7.5.Z:java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"7Server-7.5.Z:java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"7Server-7.5.Z:java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"7Server-7.5.Z:java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"7Server-7.5.Z:java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"7Server-7.5.Z:java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"7Server-7.5.Z:java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"7Server-7.5.Z:java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"7Server-7.5.Z:java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"7Server-7.5.Z:java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"7Server-7.5.Z:java-1.7.0-openjdk-javadoc-1:1.7.0.191-2.6.15.4.el7_5.noarch",
"7Server-7.5.Z:java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"7Server-7.5.Z:java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"7Server-7.5.Z:java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"7Server-7.5.Z:java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"7Server-7.5.Z:java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"7Server-Alt-7.5.Z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"7Server-Alt-7.5.Z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"7Server-Alt-7.5.Z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"7Server-Alt-7.5.Z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"7Server-Alt-7.5.Z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.src",
"7Server-Alt-7.5.Z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"7Server-Alt-7.5.Z:java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"7Server-Alt-7.5.Z:java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"7Server-Alt-7.5.Z:java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"7Server-Alt-7.5.Z:java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"7Server-Alt-7.5.Z:java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"7Server-Alt-7.5.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"7Server-Alt-7.5.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"7Server-Alt-7.5.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"7Server-Alt-7.5.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"7Server-Alt-7.5.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"7Server-Alt-7.5.Z:java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"7Server-Alt-7.5.Z:java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"7Server-Alt-7.5.Z:java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"7Server-Alt-7.5.Z:java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"7Server-Alt-7.5.Z:java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"7Server-Alt-7.5.Z:java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"7Server-Alt-7.5.Z:java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"7Server-Alt-7.5.Z:java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"7Server-Alt-7.5.Z:java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"7Server-Alt-7.5.Z:java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"7Server-Alt-7.5.Z:java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"7Server-Alt-7.5.Z:java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"7Server-Alt-7.5.Z:java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"7Server-Alt-7.5.Z:java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"7Server-Alt-7.5.Z:java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"7Server-Alt-7.5.Z:java-1.7.0-openjdk-javadoc-1:1.7.0.191-2.6.15.4.el7_5.noarch",
"7Server-Alt-7.5.Z:java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"7Server-Alt-7.5.Z:java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"7Server-Alt-7.5.Z:java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"7Server-Alt-7.5.Z:java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"7Server-Alt-7.5.Z:java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"7Server-optional-7.5.Z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"7Server-optional-7.5.Z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"7Server-optional-7.5.Z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"7Server-optional-7.5.Z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"7Server-optional-7.5.Z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.src",
"7Server-optional-7.5.Z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"7Server-optional-7.5.Z:java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"7Server-optional-7.5.Z:java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"7Server-optional-7.5.Z:java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"7Server-optional-7.5.Z:java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"7Server-optional-7.5.Z:java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"7Server-optional-7.5.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"7Server-optional-7.5.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"7Server-optional-7.5.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"7Server-optional-7.5.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"7Server-optional-7.5.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"7Server-optional-7.5.Z:java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"7Server-optional-7.5.Z:java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"7Server-optional-7.5.Z:java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"7Server-optional-7.5.Z:java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"7Server-optional-7.5.Z:java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"7Server-optional-7.5.Z:java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"7Server-optional-7.5.Z:java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"7Server-optional-7.5.Z:java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"7Server-optional-7.5.Z:java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"7Server-optional-7.5.Z:java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"7Server-optional-7.5.Z:java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"7Server-optional-7.5.Z:java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"7Server-optional-7.5.Z:java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"7Server-optional-7.5.Z:java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"7Server-optional-7.5.Z:java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"7Server-optional-7.5.Z:java-1.7.0-openjdk-javadoc-1:1.7.0.191-2.6.15.4.el7_5.noarch",
"7Server-optional-7.5.Z:java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"7Server-optional-7.5.Z:java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"7Server-optional-7.5.Z:java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"7Server-optional-7.5.Z:java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"7Server-optional-7.5.Z:java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"7Server-optional-Alt-7.5.Z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"7Server-optional-Alt-7.5.Z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"7Server-optional-Alt-7.5.Z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"7Server-optional-Alt-7.5.Z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"7Server-optional-Alt-7.5.Z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.src",
"7Server-optional-Alt-7.5.Z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"7Server-optional-Alt-7.5.Z:java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"7Server-optional-Alt-7.5.Z:java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"7Server-optional-Alt-7.5.Z:java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"7Server-optional-Alt-7.5.Z:java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"7Server-optional-Alt-7.5.Z:java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"7Server-optional-Alt-7.5.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"7Server-optional-Alt-7.5.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"7Server-optional-Alt-7.5.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"7Server-optional-Alt-7.5.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"7Server-optional-Alt-7.5.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"7Server-optional-Alt-7.5.Z:java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"7Server-optional-Alt-7.5.Z:java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"7Server-optional-Alt-7.5.Z:java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"7Server-optional-Alt-7.5.Z:java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"7Server-optional-Alt-7.5.Z:java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"7Server-optional-Alt-7.5.Z:java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"7Server-optional-Alt-7.5.Z:java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"7Server-optional-Alt-7.5.Z:java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"7Server-optional-Alt-7.5.Z:java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"7Server-optional-Alt-7.5.Z:java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"7Server-optional-Alt-7.5.Z:java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"7Server-optional-Alt-7.5.Z:java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"7Server-optional-Alt-7.5.Z:java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"7Server-optional-Alt-7.5.Z:java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"7Server-optional-Alt-7.5.Z:java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"7Server-optional-Alt-7.5.Z:java-1.7.0-openjdk-javadoc-1:1.7.0.191-2.6.15.4.el7_5.noarch",
"7Server-optional-Alt-7.5.Z:java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"7Server-optional-Alt-7.5.Z:java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"7Server-optional-Alt-7.5.Z:java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"7Server-optional-Alt-7.5.Z:java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"7Server-optional-Alt-7.5.Z:java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"7Workstation-7.5.Z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"7Workstation-7.5.Z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"7Workstation-7.5.Z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"7Workstation-7.5.Z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"7Workstation-7.5.Z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.src",
"7Workstation-7.5.Z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"7Workstation-7.5.Z:java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"7Workstation-7.5.Z:java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"7Workstation-7.5.Z:java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"7Workstation-7.5.Z:java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"7Workstation-7.5.Z:java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"7Workstation-7.5.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"7Workstation-7.5.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"7Workstation-7.5.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"7Workstation-7.5.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"7Workstation-7.5.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"7Workstation-7.5.Z:java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"7Workstation-7.5.Z:java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"7Workstation-7.5.Z:java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"7Workstation-7.5.Z:java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"7Workstation-7.5.Z:java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"7Workstation-7.5.Z:java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"7Workstation-7.5.Z:java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"7Workstation-7.5.Z:java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"7Workstation-7.5.Z:java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"7Workstation-7.5.Z:java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"7Workstation-7.5.Z:java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"7Workstation-7.5.Z:java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"7Workstation-7.5.Z:java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"7Workstation-7.5.Z:java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"7Workstation-7.5.Z:java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"7Workstation-7.5.Z:java-1.7.0-openjdk-javadoc-1:1.7.0.191-2.6.15.4.el7_5.noarch",
"7Workstation-7.5.Z:java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"7Workstation-7.5.Z:java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"7Workstation-7.5.Z:java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"7Workstation-7.5.Z:java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"7Workstation-7.5.Z:java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"7Workstation-optional-7.5.Z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"7Workstation-optional-7.5.Z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"7Workstation-optional-7.5.Z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"7Workstation-optional-7.5.Z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"7Workstation-optional-7.5.Z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.src",
"7Workstation-optional-7.5.Z:java-1.7.0-openjdk-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"7Workstation-optional-7.5.Z:java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"7Workstation-optional-7.5.Z:java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"7Workstation-optional-7.5.Z:java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"7Workstation-optional-7.5.Z:java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"7Workstation-optional-7.5.Z:java-1.7.0-openjdk-accessibility-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"7Workstation-optional-7.5.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"7Workstation-optional-7.5.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"7Workstation-optional-7.5.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"7Workstation-optional-7.5.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"7Workstation-optional-7.5.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"7Workstation-optional-7.5.Z:java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"7Workstation-optional-7.5.Z:java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"7Workstation-optional-7.5.Z:java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"7Workstation-optional-7.5.Z:java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"7Workstation-optional-7.5.Z:java-1.7.0-openjdk-demo-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"7Workstation-optional-7.5.Z:java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"7Workstation-optional-7.5.Z:java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"7Workstation-optional-7.5.Z:java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"7Workstation-optional-7.5.Z:java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"7Workstation-optional-7.5.Z:java-1.7.0-openjdk-devel-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"7Workstation-optional-7.5.Z:java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"7Workstation-optional-7.5.Z:java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"7Workstation-optional-7.5.Z:java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"7Workstation-optional-7.5.Z:java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"7Workstation-optional-7.5.Z:java-1.7.0-openjdk-headless-1:1.7.0.191-2.6.15.4.el7_5.x86_64",
"7Workstation-optional-7.5.Z:java-1.7.0-openjdk-javadoc-1:1.7.0.191-2.6.15.4.el7_5.noarch",
"7Workstation-optional-7.5.Z:java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.aarch64",
"7Workstation-optional-7.5.Z:java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.ppc64",
"7Workstation-optional-7.5.Z:java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.ppc64le",
"7Workstation-optional-7.5.Z:java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.s390x",
"7Workstation-optional-7.5.Z:java-1.7.0-openjdk-src-1:1.7.0.191-2.6.15.4.el7_5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "OpenJDK: insufficient index validation in PatternSyntaxException getMessage() (Concurrency, 8199547)"
}
]
}
rhsa-2018:2254
Vulnerability from csaf_redhat
Published
2018-07-24 21:09
Modified
2025-08-03 18:29
Summary
Red Hat Security Advisory: java-1.7.0-oracle security update
Notes
Topic
An update for java-1.7.0-oracle is now available for Oracle Java for Red Hat Enterprise Linux 7.
Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
Oracle Java SE version 7 includes the Oracle Java Runtime Environment and the Oracle Java Software Development Kit.
This update upgrades Oracle Java SE 7 to version 7 Update 191.
Security Fix(es):
* Oracle JDK: unspecified vulnerability fixed in 7u191, 8u181, and 10.0.2 (JavaFX) (CVE-2018-2941)
* Oracle JDK: unspecified vulnerability fixed in 6u201, 7u191, 8u181, and 10.0.2 (Libraries) (CVE-2018-2940)
* OpenJDK: insufficient index validation in PatternSyntaxException getMessage() (Concurrency, 8199547) (CVE-2018-2952)
* Oracle JDK: unspecified vulnerability fixed in 6u201, 7u191, 8u181, and 10.0.2 (JSSE) (CVE-2018-2973)
For more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Critical"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for java-1.7.0-oracle is now available for Oracle Java for Red Hat Enterprise Linux 7.\n\nRed Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Oracle Java SE version 7 includes the Oracle Java Runtime Environment and the Oracle Java Software Development Kit.\n\nThis update upgrades Oracle Java SE 7 to version 7 Update 191.\n\nSecurity Fix(es):\n\n* Oracle JDK: unspecified vulnerability fixed in 7u191, 8u181, and 10.0.2 (JavaFX) (CVE-2018-2941)\n\n* Oracle JDK: unspecified vulnerability fixed in 6u201, 7u191, 8u181, and 10.0.2 (Libraries) (CVE-2018-2940)\n\n* OpenJDK: insufficient index validation in PatternSyntaxException getMessage() (Concurrency, 8199547) (CVE-2018-2952)\n\n* Oracle JDK: unspecified vulnerability fixed in 6u201, 7u191, 8u181, and 10.0.2 (JSSE) (CVE-2018-2973)\n\nFor more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2018:2254",
"url": "https://access.redhat.com/errata/RHSA-2018:2254"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#critical",
"url": "https://access.redhat.com/security/updates/classification/#critical"
},
{
"category": "external",
"summary": "1600925",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1600925"
},
{
"category": "external",
"summary": "1602143",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1602143"
},
{
"category": "external",
"summary": "1602145",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1602145"
},
{
"category": "external",
"summary": "1602146",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1602146"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_2254.json"
}
],
"title": "Red Hat Security Advisory: java-1.7.0-oracle security update",
"tracking": {
"current_release_date": "2025-08-03T18:29:14+00:00",
"generator": {
"date": "2025-08-03T18:29:14+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.6.6"
}
},
"id": "RHSA-2018:2254",
"initial_release_date": "2018-07-24T21:09:35+00:00",
"revision_history": [
{
"date": "2018-07-24T21:09:35+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2018-07-24T21:09:35+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2025-08-03T18:29:14+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Oracle Java for Red Hat Enterprise Linux Client (v. 7)",
"product": {
"name": "Oracle Java for Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-OracleJava-7.5.Z",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras_oracle_java:7"
}
}
},
{
"category": "product_name",
"name": "Oracle Java for Red Hat Enterprise Linux Compute Node (v. 7)",
"product": {
"name": "Oracle Java for Red Hat Enterprise Linux Compute Node (v. 7)",
"product_id": "7ComputeNode-OracleJava-7.5.Z",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras_oracle_java:7"
}
}
},
{
"category": "product_name",
"name": "Oracle Java for Red Hat Enterprise Linux Server (v. 7)",
"product": {
"name": "Oracle Java for Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-OracleJava-7.5.Z",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras_oracle_java:7"
}
}
},
{
"category": "product_name",
"name": "Oracle Java for Red Hat Enterprise Linux Workstation (v. 7)",
"product": {
"name": "Oracle Java for Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-OracleJava-7.5.Z",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras_oracle_java:7"
}
}
}
],
"category": "product_family",
"name": "Oracle Java for Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "java-1.7.0-oracle-javafx-1:1.7.0.191-1jpp.2.el7.x86_64",
"product": {
"name": "java-1.7.0-oracle-javafx-1:1.7.0.191-1jpp.2.el7.x86_64",
"product_id": "java-1.7.0-oracle-javafx-1:1.7.0.191-1jpp.2.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.7.0-oracle-javafx@1.7.0.191-1jpp.2.el7?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.7.0-oracle-src-1:1.7.0.191-1jpp.2.el7.x86_64",
"product": {
"name": "java-1.7.0-oracle-src-1:1.7.0.191-1jpp.2.el7.x86_64",
"product_id": "java-1.7.0-oracle-src-1:1.7.0.191-1jpp.2.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.7.0-oracle-src@1.7.0.191-1jpp.2.el7?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.7.0-oracle-devel-1:1.7.0.191-1jpp.2.el7.x86_64",
"product": {
"name": "java-1.7.0-oracle-devel-1:1.7.0.191-1jpp.2.el7.x86_64",
"product_id": "java-1.7.0-oracle-devel-1:1.7.0.191-1jpp.2.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.7.0-oracle-devel@1.7.0.191-1jpp.2.el7?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.7.0-oracle-plugin-1:1.7.0.191-1jpp.2.el7.x86_64",
"product": {
"name": "java-1.7.0-oracle-plugin-1:1.7.0.191-1jpp.2.el7.x86_64",
"product_id": "java-1.7.0-oracle-plugin-1:1.7.0.191-1jpp.2.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.7.0-oracle-plugin@1.7.0.191-1jpp.2.el7?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.7.0-oracle-jdbc-1:1.7.0.191-1jpp.2.el7.x86_64",
"product": {
"name": "java-1.7.0-oracle-jdbc-1:1.7.0.191-1jpp.2.el7.x86_64",
"product_id": "java-1.7.0-oracle-jdbc-1:1.7.0.191-1jpp.2.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.7.0-oracle-jdbc@1.7.0.191-1jpp.2.el7?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.7.0-oracle-1:1.7.0.191-1jpp.2.el7.x86_64",
"product": {
"name": "java-1.7.0-oracle-1:1.7.0.191-1jpp.2.el7.x86_64",
"product_id": "java-1.7.0-oracle-1:1.7.0.191-1jpp.2.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.7.0-oracle@1.7.0.191-1jpp.2.el7?arch=x86_64\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "x86_64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-oracle-1:1.7.0.191-1jpp.2.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-OracleJava-7.5.Z:java-1.7.0-oracle-1:1.7.0.191-1jpp.2.el7.x86_64"
},
"product_reference": "java-1.7.0-oracle-1:1.7.0.191-1jpp.2.el7.x86_64",
"relates_to_product_reference": "7Client-OracleJava-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-oracle-devel-1:1.7.0.191-1jpp.2.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-OracleJava-7.5.Z:java-1.7.0-oracle-devel-1:1.7.0.191-1jpp.2.el7.x86_64"
},
"product_reference": "java-1.7.0-oracle-devel-1:1.7.0.191-1jpp.2.el7.x86_64",
"relates_to_product_reference": "7Client-OracleJava-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-oracle-javafx-1:1.7.0.191-1jpp.2.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-OracleJava-7.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.191-1jpp.2.el7.x86_64"
},
"product_reference": "java-1.7.0-oracle-javafx-1:1.7.0.191-1jpp.2.el7.x86_64",
"relates_to_product_reference": "7Client-OracleJava-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-oracle-jdbc-1:1.7.0.191-1jpp.2.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-OracleJava-7.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.191-1jpp.2.el7.x86_64"
},
"product_reference": "java-1.7.0-oracle-jdbc-1:1.7.0.191-1jpp.2.el7.x86_64",
"relates_to_product_reference": "7Client-OracleJava-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-oracle-plugin-1:1.7.0.191-1jpp.2.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-OracleJava-7.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.191-1jpp.2.el7.x86_64"
},
"product_reference": "java-1.7.0-oracle-plugin-1:1.7.0.191-1jpp.2.el7.x86_64",
"relates_to_product_reference": "7Client-OracleJava-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-oracle-src-1:1.7.0.191-1jpp.2.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-OracleJava-7.5.Z:java-1.7.0-oracle-src-1:1.7.0.191-1jpp.2.el7.x86_64"
},
"product_reference": "java-1.7.0-oracle-src-1:1.7.0.191-1jpp.2.el7.x86_64",
"relates_to_product_reference": "7Client-OracleJava-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-oracle-1:1.7.0.191-1jpp.2.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Compute Node (v. 7)",
"product_id": "7ComputeNode-OracleJava-7.5.Z:java-1.7.0-oracle-1:1.7.0.191-1jpp.2.el7.x86_64"
},
"product_reference": "java-1.7.0-oracle-1:1.7.0.191-1jpp.2.el7.x86_64",
"relates_to_product_reference": "7ComputeNode-OracleJava-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-oracle-devel-1:1.7.0.191-1jpp.2.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Compute Node (v. 7)",
"product_id": "7ComputeNode-OracleJava-7.5.Z:java-1.7.0-oracle-devel-1:1.7.0.191-1jpp.2.el7.x86_64"
},
"product_reference": "java-1.7.0-oracle-devel-1:1.7.0.191-1jpp.2.el7.x86_64",
"relates_to_product_reference": "7ComputeNode-OracleJava-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-oracle-javafx-1:1.7.0.191-1jpp.2.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Compute Node (v. 7)",
"product_id": "7ComputeNode-OracleJava-7.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.191-1jpp.2.el7.x86_64"
},
"product_reference": "java-1.7.0-oracle-javafx-1:1.7.0.191-1jpp.2.el7.x86_64",
"relates_to_product_reference": "7ComputeNode-OracleJava-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-oracle-jdbc-1:1.7.0.191-1jpp.2.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Compute Node (v. 7)",
"product_id": "7ComputeNode-OracleJava-7.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.191-1jpp.2.el7.x86_64"
},
"product_reference": "java-1.7.0-oracle-jdbc-1:1.7.0.191-1jpp.2.el7.x86_64",
"relates_to_product_reference": "7ComputeNode-OracleJava-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-oracle-plugin-1:1.7.0.191-1jpp.2.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Compute Node (v. 7)",
"product_id": "7ComputeNode-OracleJava-7.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.191-1jpp.2.el7.x86_64"
},
"product_reference": "java-1.7.0-oracle-plugin-1:1.7.0.191-1jpp.2.el7.x86_64",
"relates_to_product_reference": "7ComputeNode-OracleJava-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-oracle-src-1:1.7.0.191-1jpp.2.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Compute Node (v. 7)",
"product_id": "7ComputeNode-OracleJava-7.5.Z:java-1.7.0-oracle-src-1:1.7.0.191-1jpp.2.el7.x86_64"
},
"product_reference": "java-1.7.0-oracle-src-1:1.7.0.191-1jpp.2.el7.x86_64",
"relates_to_product_reference": "7ComputeNode-OracleJava-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-oracle-1:1.7.0.191-1jpp.2.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-OracleJava-7.5.Z:java-1.7.0-oracle-1:1.7.0.191-1jpp.2.el7.x86_64"
},
"product_reference": "java-1.7.0-oracle-1:1.7.0.191-1jpp.2.el7.x86_64",
"relates_to_product_reference": "7Server-OracleJava-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-oracle-devel-1:1.7.0.191-1jpp.2.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-OracleJava-7.5.Z:java-1.7.0-oracle-devel-1:1.7.0.191-1jpp.2.el7.x86_64"
},
"product_reference": "java-1.7.0-oracle-devel-1:1.7.0.191-1jpp.2.el7.x86_64",
"relates_to_product_reference": "7Server-OracleJava-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-oracle-javafx-1:1.7.0.191-1jpp.2.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-OracleJava-7.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.191-1jpp.2.el7.x86_64"
},
"product_reference": "java-1.7.0-oracle-javafx-1:1.7.0.191-1jpp.2.el7.x86_64",
"relates_to_product_reference": "7Server-OracleJava-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-oracle-jdbc-1:1.7.0.191-1jpp.2.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-OracleJava-7.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.191-1jpp.2.el7.x86_64"
},
"product_reference": "java-1.7.0-oracle-jdbc-1:1.7.0.191-1jpp.2.el7.x86_64",
"relates_to_product_reference": "7Server-OracleJava-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-oracle-plugin-1:1.7.0.191-1jpp.2.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-OracleJava-7.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.191-1jpp.2.el7.x86_64"
},
"product_reference": "java-1.7.0-oracle-plugin-1:1.7.0.191-1jpp.2.el7.x86_64",
"relates_to_product_reference": "7Server-OracleJava-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-oracle-src-1:1.7.0.191-1jpp.2.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-OracleJava-7.5.Z:java-1.7.0-oracle-src-1:1.7.0.191-1jpp.2.el7.x86_64"
},
"product_reference": "java-1.7.0-oracle-src-1:1.7.0.191-1jpp.2.el7.x86_64",
"relates_to_product_reference": "7Server-OracleJava-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-oracle-1:1.7.0.191-1jpp.2.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-OracleJava-7.5.Z:java-1.7.0-oracle-1:1.7.0.191-1jpp.2.el7.x86_64"
},
"product_reference": "java-1.7.0-oracle-1:1.7.0.191-1jpp.2.el7.x86_64",
"relates_to_product_reference": "7Workstation-OracleJava-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-oracle-devel-1:1.7.0.191-1jpp.2.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-OracleJava-7.5.Z:java-1.7.0-oracle-devel-1:1.7.0.191-1jpp.2.el7.x86_64"
},
"product_reference": "java-1.7.0-oracle-devel-1:1.7.0.191-1jpp.2.el7.x86_64",
"relates_to_product_reference": "7Workstation-OracleJava-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-oracle-javafx-1:1.7.0.191-1jpp.2.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-OracleJava-7.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.191-1jpp.2.el7.x86_64"
},
"product_reference": "java-1.7.0-oracle-javafx-1:1.7.0.191-1jpp.2.el7.x86_64",
"relates_to_product_reference": "7Workstation-OracleJava-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-oracle-jdbc-1:1.7.0.191-1jpp.2.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-OracleJava-7.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.191-1jpp.2.el7.x86_64"
},
"product_reference": "java-1.7.0-oracle-jdbc-1:1.7.0.191-1jpp.2.el7.x86_64",
"relates_to_product_reference": "7Workstation-OracleJava-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-oracle-plugin-1:1.7.0.191-1jpp.2.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-OracleJava-7.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.191-1jpp.2.el7.x86_64"
},
"product_reference": "java-1.7.0-oracle-plugin-1:1.7.0.191-1jpp.2.el7.x86_64",
"relates_to_product_reference": "7Workstation-OracleJava-7.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.0-oracle-src-1:1.7.0.191-1jpp.2.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-OracleJava-7.5.Z:java-1.7.0-oracle-src-1:1.7.0.191-1jpp.2.el7.x86_64"
},
"product_reference": "java-1.7.0-oracle-src-1:1.7.0.191-1jpp.2.el7.x86_64",
"relates_to_product_reference": "7Workstation-OracleJava-7.5.Z"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2018-2940",
"discovery_date": "2018-07-17T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1602146"
}
],
"notes": [
{
"category": "description",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries). Supported versions that are affected are Java SE: 6u191, 7u181, 8u172 and 10.0.1; Java SE Embedded: 8u171. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 4.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "JDK: unspecified vulnerability fixed in 6u201, 7u191, 8u181, and 10.0.2 (Libraries)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Client-OracleJava-7.5.Z:java-1.7.0-oracle-1:1.7.0.191-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.7.0-oracle-devel-1:1.7.0.191-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.191-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.191-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.191-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.7.0-oracle-src-1:1.7.0.191-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.7.0-oracle-1:1.7.0.191-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.7.0-oracle-devel-1:1.7.0.191-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.191-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.191-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.191-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.7.0-oracle-src-1:1.7.0.191-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.7.0-oracle-1:1.7.0.191-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.7.0-oracle-devel-1:1.7.0.191-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.191-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.191-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.191-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.7.0-oracle-src-1:1.7.0.191-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.7.0-oracle-1:1.7.0.191-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.7.0-oracle-devel-1:1.7.0.191-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.191-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.191-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.191-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.7.0-oracle-src-1:1.7.0.191-1jpp.2.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-2940"
},
{
"category": "external",
"summary": "RHBZ#1602146",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1602146"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-2940",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-2940"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2940",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2940"
},
{
"category": "external",
"summary": "http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html#AppendixJAVA",
"url": "http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html#AppendixJAVA"
}
],
"release_date": "2018-07-17T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-07-24T21:09:35+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.",
"product_ids": [
"7Client-OracleJava-7.5.Z:java-1.7.0-oracle-1:1.7.0.191-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.7.0-oracle-devel-1:1.7.0.191-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.191-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.191-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.191-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.7.0-oracle-src-1:1.7.0.191-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.7.0-oracle-1:1.7.0.191-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.7.0-oracle-devel-1:1.7.0.191-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.191-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.191-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.191-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.7.0-oracle-src-1:1.7.0.191-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.7.0-oracle-1:1.7.0.191-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.7.0-oracle-devel-1:1.7.0.191-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.191-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.191-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.191-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.7.0-oracle-src-1:1.7.0.191-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.7.0-oracle-1:1.7.0.191-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.7.0-oracle-devel-1:1.7.0.191-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.191-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.191-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.191-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.7.0-oracle-src-1:1.7.0.191-1jpp.2.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:2254"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"7Client-OracleJava-7.5.Z:java-1.7.0-oracle-1:1.7.0.191-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.7.0-oracle-devel-1:1.7.0.191-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.191-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.191-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.191-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.7.0-oracle-src-1:1.7.0.191-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.7.0-oracle-1:1.7.0.191-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.7.0-oracle-devel-1:1.7.0.191-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.191-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.191-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.191-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.7.0-oracle-src-1:1.7.0.191-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.7.0-oracle-1:1.7.0.191-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.7.0-oracle-devel-1:1.7.0.191-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.191-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.191-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.191-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.7.0-oracle-src-1:1.7.0.191-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.7.0-oracle-1:1.7.0.191-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.7.0-oracle-devel-1:1.7.0.191-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.191-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.191-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.191-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.7.0-oracle-src-1:1.7.0.191-1jpp.2.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "JDK: unspecified vulnerability fixed in 6u201, 7u191, 8u181, and 10.0.2 (Libraries)"
},
{
"cve": "CVE-2018-2941",
"discovery_date": "2018-07-17T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1602143"
}
],
"notes": [
{
"category": "description",
"text": "Vulnerability in the Java SE component of Oracle Java SE (subcomponent: JavaFX). Supported versions that are affected are Java SE: 7u181, 8u172 and 10.0.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 8.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "JDK: unspecified vulnerability fixed in 7u191, 8u181, and 10.0.2 (JavaFX)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Client-OracleJava-7.5.Z:java-1.7.0-oracle-1:1.7.0.191-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.7.0-oracle-devel-1:1.7.0.191-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.191-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.191-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.191-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.7.0-oracle-src-1:1.7.0.191-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.7.0-oracle-1:1.7.0.191-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.7.0-oracle-devel-1:1.7.0.191-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.191-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.191-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.191-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.7.0-oracle-src-1:1.7.0.191-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.7.0-oracle-1:1.7.0.191-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.7.0-oracle-devel-1:1.7.0.191-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.191-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.191-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.191-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.7.0-oracle-src-1:1.7.0.191-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.7.0-oracle-1:1.7.0.191-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.7.0-oracle-devel-1:1.7.0.191-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.191-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.191-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.191-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.7.0-oracle-src-1:1.7.0.191-1jpp.2.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-2941"
},
{
"category": "external",
"summary": "RHBZ#1602143",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1602143"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-2941",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-2941"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2941",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2941"
},
{
"category": "external",
"summary": "http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html#AppendixJAVA",
"url": "http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html#AppendixJAVA"
}
],
"release_date": "2018-07-17T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-07-24T21:09:35+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.",
"product_ids": [
"7Client-OracleJava-7.5.Z:java-1.7.0-oracle-1:1.7.0.191-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.7.0-oracle-devel-1:1.7.0.191-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.191-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.191-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.191-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.7.0-oracle-src-1:1.7.0.191-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.7.0-oracle-1:1.7.0.191-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.7.0-oracle-devel-1:1.7.0.191-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.191-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.191-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.191-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.7.0-oracle-src-1:1.7.0.191-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.7.0-oracle-1:1.7.0.191-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.7.0-oracle-devel-1:1.7.0.191-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.191-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.191-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.191-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.7.0-oracle-src-1:1.7.0.191-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.7.0-oracle-1:1.7.0.191-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.7.0-oracle-devel-1:1.7.0.191-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.191-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.191-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.191-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.7.0-oracle-src-1:1.7.0.191-1jpp.2.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:2254"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"7Client-OracleJava-7.5.Z:java-1.7.0-oracle-1:1.7.0.191-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.7.0-oracle-devel-1:1.7.0.191-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.191-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.191-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.191-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.7.0-oracle-src-1:1.7.0.191-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.7.0-oracle-1:1.7.0.191-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.7.0-oracle-devel-1:1.7.0.191-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.191-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.191-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.191-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.7.0-oracle-src-1:1.7.0.191-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.7.0-oracle-1:1.7.0.191-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.7.0-oracle-devel-1:1.7.0.191-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.191-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.191-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.191-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.7.0-oracle-src-1:1.7.0.191-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.7.0-oracle-1:1.7.0.191-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.7.0-oracle-devel-1:1.7.0.191-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.191-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.191-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.191-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.7.0-oracle-src-1:1.7.0.191-1jpp.2.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "JDK: unspecified vulnerability fixed in 7u191, 8u181, and 10.0.2 (JavaFX)"
},
{
"cve": "CVE-2018-2952",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2018-07-11T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1600925"
}
],
"notes": [
{
"category": "description",
"text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Concurrency). Supported versions that are affected are Java SE: 6u191, 7u181, 8u172 and 10.0.1; Java SE Embedded: 8u171; JRockit: R28.3.18. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 3.7 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK: insufficient index validation in PatternSyntaxException getMessage() (Concurrency, 8199547)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Client-OracleJava-7.5.Z:java-1.7.0-oracle-1:1.7.0.191-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.7.0-oracle-devel-1:1.7.0.191-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.191-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.191-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.191-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.7.0-oracle-src-1:1.7.0.191-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.7.0-oracle-1:1.7.0.191-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.7.0-oracle-devel-1:1.7.0.191-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.191-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.191-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.191-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.7.0-oracle-src-1:1.7.0.191-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.7.0-oracle-1:1.7.0.191-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.7.0-oracle-devel-1:1.7.0.191-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.191-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.191-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.191-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.7.0-oracle-src-1:1.7.0.191-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.7.0-oracle-1:1.7.0.191-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.7.0-oracle-devel-1:1.7.0.191-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.191-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.191-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.191-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.7.0-oracle-src-1:1.7.0.191-1jpp.2.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-2952"
},
{
"category": "external",
"summary": "RHBZ#1600925",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1600925"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-2952",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-2952"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2952",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2952"
}
],
"release_date": "2018-07-17T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-07-24T21:09:35+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.",
"product_ids": [
"7Client-OracleJava-7.5.Z:java-1.7.0-oracle-1:1.7.0.191-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.7.0-oracle-devel-1:1.7.0.191-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.191-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.191-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.191-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.7.0-oracle-src-1:1.7.0.191-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.7.0-oracle-1:1.7.0.191-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.7.0-oracle-devel-1:1.7.0.191-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.191-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.191-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.191-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.7.0-oracle-src-1:1.7.0.191-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.7.0-oracle-1:1.7.0.191-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.7.0-oracle-devel-1:1.7.0.191-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.191-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.191-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.191-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.7.0-oracle-src-1:1.7.0.191-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.7.0-oracle-1:1.7.0.191-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.7.0-oracle-devel-1:1.7.0.191-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.191-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.191-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.191-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.7.0-oracle-src-1:1.7.0.191-1jpp.2.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:2254"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 3.7,
"baseSeverity": "LOW",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"7Client-OracleJava-7.5.Z:java-1.7.0-oracle-1:1.7.0.191-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.7.0-oracle-devel-1:1.7.0.191-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.191-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.191-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.191-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.7.0-oracle-src-1:1.7.0.191-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.7.0-oracle-1:1.7.0.191-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.7.0-oracle-devel-1:1.7.0.191-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.191-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.191-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.191-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.7.0-oracle-src-1:1.7.0.191-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.7.0-oracle-1:1.7.0.191-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.7.0-oracle-devel-1:1.7.0.191-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.191-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.191-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.191-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.7.0-oracle-src-1:1.7.0.191-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.7.0-oracle-1:1.7.0.191-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.7.0-oracle-devel-1:1.7.0.191-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.191-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.191-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.191-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.7.0-oracle-src-1:1.7.0.191-1jpp.2.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "OpenJDK: insufficient index validation in PatternSyntaxException getMessage() (Concurrency, 8199547)"
},
{
"cve": "CVE-2018-2973",
"discovery_date": "2018-07-17T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1602145"
}
],
"notes": [
{
"category": "description",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: JSSE). Supported versions that are affected are Java SE: 6u191, 7u181, 8u172 and 10.0.1; Java SE Embedded: 8u171. Difficult to exploit vulnerability allows unauthenticated attacker with network access via SSL/TLS to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 5.9 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "JDK: unspecified vulnerability fixed in 6u201, 7u191, 8u181, and 10.0.2 (JSSE)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Client-OracleJava-7.5.Z:java-1.7.0-oracle-1:1.7.0.191-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.7.0-oracle-devel-1:1.7.0.191-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.191-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.191-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.191-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.7.0-oracle-src-1:1.7.0.191-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.7.0-oracle-1:1.7.0.191-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.7.0-oracle-devel-1:1.7.0.191-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.191-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.191-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.191-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.7.0-oracle-src-1:1.7.0.191-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.7.0-oracle-1:1.7.0.191-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.7.0-oracle-devel-1:1.7.0.191-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.191-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.191-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.191-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.7.0-oracle-src-1:1.7.0.191-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.7.0-oracle-1:1.7.0.191-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.7.0-oracle-devel-1:1.7.0.191-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.191-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.191-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.191-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.7.0-oracle-src-1:1.7.0.191-1jpp.2.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-2973"
},
{
"category": "external",
"summary": "RHBZ#1602145",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1602145"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-2973",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-2973"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2973",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2973"
},
{
"category": "external",
"summary": "http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html#AppendixJAVA",
"url": "http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html#AppendixJAVA"
}
],
"release_date": "2018-07-17T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-07-24T21:09:35+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.",
"product_ids": [
"7Client-OracleJava-7.5.Z:java-1.7.0-oracle-1:1.7.0.191-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.7.0-oracle-devel-1:1.7.0.191-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.191-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.191-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.191-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.7.0-oracle-src-1:1.7.0.191-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.7.0-oracle-1:1.7.0.191-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.7.0-oracle-devel-1:1.7.0.191-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.191-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.191-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.191-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.7.0-oracle-src-1:1.7.0.191-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.7.0-oracle-1:1.7.0.191-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.7.0-oracle-devel-1:1.7.0.191-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.191-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.191-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.191-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.7.0-oracle-src-1:1.7.0.191-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.7.0-oracle-1:1.7.0.191-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.7.0-oracle-devel-1:1.7.0.191-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.191-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.191-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.191-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.7.0-oracle-src-1:1.7.0.191-1jpp.2.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:2254"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.0"
},
"products": [
"7Client-OracleJava-7.5.Z:java-1.7.0-oracle-1:1.7.0.191-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.7.0-oracle-devel-1:1.7.0.191-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.191-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.191-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.191-1jpp.2.el7.x86_64",
"7Client-OracleJava-7.5.Z:java-1.7.0-oracle-src-1:1.7.0.191-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.7.0-oracle-1:1.7.0.191-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.7.0-oracle-devel-1:1.7.0.191-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.191-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.191-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.191-1jpp.2.el7.x86_64",
"7ComputeNode-OracleJava-7.5.Z:java-1.7.0-oracle-src-1:1.7.0.191-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.7.0-oracle-1:1.7.0.191-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.7.0-oracle-devel-1:1.7.0.191-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.191-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.191-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.191-1jpp.2.el7.x86_64",
"7Server-OracleJava-7.5.Z:java-1.7.0-oracle-src-1:1.7.0.191-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.7.0-oracle-1:1.7.0.191-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.7.0-oracle-devel-1:1.7.0.191-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.191-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.191-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.191-1jpp.2.el7.x86_64",
"7Workstation-OracleJava-7.5.Z:java-1.7.0-oracle-src-1:1.7.0.191-1jpp.2.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "JDK: unspecified vulnerability fixed in 6u201, 7u191, 8u181, and 10.0.2 (JSSE)"
}
]
}
rhsa-2018:2256
Vulnerability from csaf_redhat
Published
2018-07-24 21:09
Modified
2025-08-03 18:29
Summary
Red Hat Security Advisory: java-1.8.0-oracle security update
Notes
Topic
An update for java-1.8.0-oracle is now available for Oracle Java for Red Hat Enterprise Linux 6.
Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
Oracle Java SE version 8 includes the Oracle Java Runtime Environment and the Oracle Java Software Development Kit.
This update upgrades Oracle Java SE 8 to version 8 Update 181.
Security Fix(es):
* Oracle JDK: unspecified vulnerability fixed in 7u191, 8u181, and 10.0.2 (JavaFX) (CVE-2018-2941)
* Oracle JDK: unspecified vulnerability fixed in 8u181 and 10.0.2 (Deployment) (CVE-2018-2964)
* Oracle JDK: unspecified vulnerability fixed in 6u201, 7u191, 8u181, and 10.0.2 (Libraries) (CVE-2018-2940)
* OpenJDK: insufficient index validation in PatternSyntaxException getMessage() (Concurrency, 8199547) (CVE-2018-2952)
* Oracle JDK: unspecified vulnerability fixed in 6u201, 7u191, 8u181, and 10.0.2 (JSSE) (CVE-2018-2973)
For more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Critical"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for java-1.8.0-oracle is now available for Oracle Java for Red Hat Enterprise Linux 6.\n\nRed Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Oracle Java SE version 8 includes the Oracle Java Runtime Environment and the Oracle Java Software Development Kit.\n\nThis update upgrades Oracle Java SE 8 to version 8 Update 181.\n\nSecurity Fix(es):\n\n* Oracle JDK: unspecified vulnerability fixed in 7u191, 8u181, and 10.0.2 (JavaFX) (CVE-2018-2941)\n\n* Oracle JDK: unspecified vulnerability fixed in 8u181 and 10.0.2 (Deployment) (CVE-2018-2964)\n\n* Oracle JDK: unspecified vulnerability fixed in 6u201, 7u191, 8u181, and 10.0.2 (Libraries) (CVE-2018-2940)\n\n* OpenJDK: insufficient index validation in PatternSyntaxException getMessage() (Concurrency, 8199547) (CVE-2018-2952)\n\n* Oracle JDK: unspecified vulnerability fixed in 6u201, 7u191, 8u181, and 10.0.2 (JSSE) (CVE-2018-2973)\n\nFor more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2018:2256",
"url": "https://access.redhat.com/errata/RHSA-2018:2256"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#critical",
"url": "https://access.redhat.com/security/updates/classification/#critical"
},
{
"category": "external",
"summary": "1600925",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1600925"
},
{
"category": "external",
"summary": "1602142",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1602142"
},
{
"category": "external",
"summary": "1602143",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1602143"
},
{
"category": "external",
"summary": "1602145",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1602145"
},
{
"category": "external",
"summary": "1602146",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1602146"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_2256.json"
}
],
"title": "Red Hat Security Advisory: java-1.8.0-oracle security update",
"tracking": {
"current_release_date": "2025-08-03T18:29:25+00:00",
"generator": {
"date": "2025-08-03T18:29:25+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.6.6"
}
},
"id": "RHSA-2018:2256",
"initial_release_date": "2018-07-24T21:09:42+00:00",
"revision_history": [
{
"date": "2018-07-24T21:09:42+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2018-07-24T21:09:42+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2025-08-03T18:29:25+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Oracle Java for Red Hat Enterprise Linux Desktop 6",
"product": {
"name": "Oracle Java for Red Hat Enterprise Linux Desktop 6",
"product_id": "6Client-OracleJava-6.10.Z",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras_oracle_java:6"
}
}
},
{
"category": "product_name",
"name": "Oracle Java for Red Hat Enterprise Linux HPC Node 6",
"product": {
"name": "Oracle Java for Red Hat Enterprise Linux HPC Node 6",
"product_id": "6ComputeNode-OracleJava-6.10.Z",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras_oracle_java:6"
}
}
},
{
"category": "product_name",
"name": "Oracle Java for Red Hat Enterprise Linux Server 6",
"product": {
"name": "Oracle Java for Red Hat Enterprise Linux Server 6",
"product_id": "6Server-OracleJava-6.10.Z",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras_oracle_java:6"
}
}
},
{
"category": "product_name",
"name": "Oracle Java for Red Hat Enterprise Linux Workstation 6",
"product": {
"name": "Oracle Java for Red Hat Enterprise Linux Workstation 6",
"product_id": "6Workstation-OracleJava-6.10.Z",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras_oracle_java:6"
}
}
}
],
"category": "product_family",
"name": "Oracle Java for Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "java-1.8.0-oracle-jdbc-1:1.8.0.181-1jpp.2.el6.x86_64",
"product": {
"name": "java-1.8.0-oracle-jdbc-1:1.8.0.181-1jpp.2.el6.x86_64",
"product_id": "java-1.8.0-oracle-jdbc-1:1.8.0.181-1jpp.2.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-oracle-jdbc@1.8.0.181-1jpp.2.el6?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-oracle-src-1:1.8.0.181-1jpp.2.el6.x86_64",
"product": {
"name": "java-1.8.0-oracle-src-1:1.8.0.181-1jpp.2.el6.x86_64",
"product_id": "java-1.8.0-oracle-src-1:1.8.0.181-1jpp.2.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-oracle-src@1.8.0.181-1jpp.2.el6?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-oracle-javafx-1:1.8.0.181-1jpp.2.el6.x86_64",
"product": {
"name": "java-1.8.0-oracle-javafx-1:1.8.0.181-1jpp.2.el6.x86_64",
"product_id": "java-1.8.0-oracle-javafx-1:1.8.0.181-1jpp.2.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-oracle-javafx@1.8.0.181-1jpp.2.el6?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-oracle-plugin-1:1.8.0.181-1jpp.2.el6.x86_64",
"product": {
"name": "java-1.8.0-oracle-plugin-1:1.8.0.181-1jpp.2.el6.x86_64",
"product_id": "java-1.8.0-oracle-plugin-1:1.8.0.181-1jpp.2.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-oracle-plugin@1.8.0.181-1jpp.2.el6?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-oracle-devel-1:1.8.0.181-1jpp.2.el6.x86_64",
"product": {
"name": "java-1.8.0-oracle-devel-1:1.8.0.181-1jpp.2.el6.x86_64",
"product_id": "java-1.8.0-oracle-devel-1:1.8.0.181-1jpp.2.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-oracle-devel@1.8.0.181-1jpp.2.el6?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el6.x86_64",
"product": {
"name": "java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el6.x86_64",
"product_id": "java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-oracle@1.8.0.181-1jpp.2.el6?arch=x86_64\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "java-1.8.0-oracle-jdbc-1:1.8.0.181-1jpp.2.el6.i686",
"product": {
"name": "java-1.8.0-oracle-jdbc-1:1.8.0.181-1jpp.2.el6.i686",
"product_id": "java-1.8.0-oracle-jdbc-1:1.8.0.181-1jpp.2.el6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-oracle-jdbc@1.8.0.181-1jpp.2.el6?arch=i686\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-oracle-src-1:1.8.0.181-1jpp.2.el6.i686",
"product": {
"name": "java-1.8.0-oracle-src-1:1.8.0.181-1jpp.2.el6.i686",
"product_id": "java-1.8.0-oracle-src-1:1.8.0.181-1jpp.2.el6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-oracle-src@1.8.0.181-1jpp.2.el6?arch=i686\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-oracle-javafx-1:1.8.0.181-1jpp.2.el6.i686",
"product": {
"name": "java-1.8.0-oracle-javafx-1:1.8.0.181-1jpp.2.el6.i686",
"product_id": "java-1.8.0-oracle-javafx-1:1.8.0.181-1jpp.2.el6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-oracle-javafx@1.8.0.181-1jpp.2.el6?arch=i686\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-oracle-plugin-1:1.8.0.181-1jpp.2.el6.i686",
"product": {
"name": "java-1.8.0-oracle-plugin-1:1.8.0.181-1jpp.2.el6.i686",
"product_id": "java-1.8.0-oracle-plugin-1:1.8.0.181-1jpp.2.el6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-oracle-plugin@1.8.0.181-1jpp.2.el6?arch=i686\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-oracle-devel-1:1.8.0.181-1jpp.2.el6.i686",
"product": {
"name": "java-1.8.0-oracle-devel-1:1.8.0.181-1jpp.2.el6.i686",
"product_id": "java-1.8.0-oracle-devel-1:1.8.0.181-1jpp.2.el6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-oracle-devel@1.8.0.181-1jpp.2.el6?arch=i686\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el6.i686",
"product": {
"name": "java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el6.i686",
"product_id": "java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-oracle@1.8.0.181-1jpp.2.el6?arch=i686\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "i686"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux Desktop 6",
"product_id": "6Client-OracleJava-6.10.Z:java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el6.i686"
},
"product_reference": "java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el6.i686",
"relates_to_product_reference": "6Client-OracleJava-6.10.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Desktop 6",
"product_id": "6Client-OracleJava-6.10.Z:java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el6.x86_64"
},
"product_reference": "java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el6.x86_64",
"relates_to_product_reference": "6Client-OracleJava-6.10.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-oracle-devel-1:1.8.0.181-1jpp.2.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux Desktop 6",
"product_id": "6Client-OracleJava-6.10.Z:java-1.8.0-oracle-devel-1:1.8.0.181-1jpp.2.el6.i686"
},
"product_reference": "java-1.8.0-oracle-devel-1:1.8.0.181-1jpp.2.el6.i686",
"relates_to_product_reference": "6Client-OracleJava-6.10.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-oracle-devel-1:1.8.0.181-1jpp.2.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Desktop 6",
"product_id": "6Client-OracleJava-6.10.Z:java-1.8.0-oracle-devel-1:1.8.0.181-1jpp.2.el6.x86_64"
},
"product_reference": "java-1.8.0-oracle-devel-1:1.8.0.181-1jpp.2.el6.x86_64",
"relates_to_product_reference": "6Client-OracleJava-6.10.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-oracle-javafx-1:1.8.0.181-1jpp.2.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux Desktop 6",
"product_id": "6Client-OracleJava-6.10.Z:java-1.8.0-oracle-javafx-1:1.8.0.181-1jpp.2.el6.i686"
},
"product_reference": "java-1.8.0-oracle-javafx-1:1.8.0.181-1jpp.2.el6.i686",
"relates_to_product_reference": "6Client-OracleJava-6.10.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-oracle-javafx-1:1.8.0.181-1jpp.2.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Desktop 6",
"product_id": "6Client-OracleJava-6.10.Z:java-1.8.0-oracle-javafx-1:1.8.0.181-1jpp.2.el6.x86_64"
},
"product_reference": "java-1.8.0-oracle-javafx-1:1.8.0.181-1jpp.2.el6.x86_64",
"relates_to_product_reference": "6Client-OracleJava-6.10.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-oracle-jdbc-1:1.8.0.181-1jpp.2.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux Desktop 6",
"product_id": "6Client-OracleJava-6.10.Z:java-1.8.0-oracle-jdbc-1:1.8.0.181-1jpp.2.el6.i686"
},
"product_reference": "java-1.8.0-oracle-jdbc-1:1.8.0.181-1jpp.2.el6.i686",
"relates_to_product_reference": "6Client-OracleJava-6.10.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-oracle-jdbc-1:1.8.0.181-1jpp.2.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Desktop 6",
"product_id": "6Client-OracleJava-6.10.Z:java-1.8.0-oracle-jdbc-1:1.8.0.181-1jpp.2.el6.x86_64"
},
"product_reference": "java-1.8.0-oracle-jdbc-1:1.8.0.181-1jpp.2.el6.x86_64",
"relates_to_product_reference": "6Client-OracleJava-6.10.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-oracle-plugin-1:1.8.0.181-1jpp.2.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux Desktop 6",
"product_id": "6Client-OracleJava-6.10.Z:java-1.8.0-oracle-plugin-1:1.8.0.181-1jpp.2.el6.i686"
},
"product_reference": "java-1.8.0-oracle-plugin-1:1.8.0.181-1jpp.2.el6.i686",
"relates_to_product_reference": "6Client-OracleJava-6.10.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-oracle-plugin-1:1.8.0.181-1jpp.2.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Desktop 6",
"product_id": "6Client-OracleJava-6.10.Z:java-1.8.0-oracle-plugin-1:1.8.0.181-1jpp.2.el6.x86_64"
},
"product_reference": "java-1.8.0-oracle-plugin-1:1.8.0.181-1jpp.2.el6.x86_64",
"relates_to_product_reference": "6Client-OracleJava-6.10.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-oracle-src-1:1.8.0.181-1jpp.2.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux Desktop 6",
"product_id": "6Client-OracleJava-6.10.Z:java-1.8.0-oracle-src-1:1.8.0.181-1jpp.2.el6.i686"
},
"product_reference": "java-1.8.0-oracle-src-1:1.8.0.181-1jpp.2.el6.i686",
"relates_to_product_reference": "6Client-OracleJava-6.10.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-oracle-src-1:1.8.0.181-1jpp.2.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Desktop 6",
"product_id": "6Client-OracleJava-6.10.Z:java-1.8.0-oracle-src-1:1.8.0.181-1jpp.2.el6.x86_64"
},
"product_reference": "java-1.8.0-oracle-src-1:1.8.0.181-1jpp.2.el6.x86_64",
"relates_to_product_reference": "6Client-OracleJava-6.10.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux HPC Node 6",
"product_id": "6ComputeNode-OracleJava-6.10.Z:java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el6.i686"
},
"product_reference": "java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el6.i686",
"relates_to_product_reference": "6ComputeNode-OracleJava-6.10.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux HPC Node 6",
"product_id": "6ComputeNode-OracleJava-6.10.Z:java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el6.x86_64"
},
"product_reference": "java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el6.x86_64",
"relates_to_product_reference": "6ComputeNode-OracleJava-6.10.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-oracle-devel-1:1.8.0.181-1jpp.2.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux HPC Node 6",
"product_id": "6ComputeNode-OracleJava-6.10.Z:java-1.8.0-oracle-devel-1:1.8.0.181-1jpp.2.el6.i686"
},
"product_reference": "java-1.8.0-oracle-devel-1:1.8.0.181-1jpp.2.el6.i686",
"relates_to_product_reference": "6ComputeNode-OracleJava-6.10.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-oracle-devel-1:1.8.0.181-1jpp.2.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux HPC Node 6",
"product_id": "6ComputeNode-OracleJava-6.10.Z:java-1.8.0-oracle-devel-1:1.8.0.181-1jpp.2.el6.x86_64"
},
"product_reference": "java-1.8.0-oracle-devel-1:1.8.0.181-1jpp.2.el6.x86_64",
"relates_to_product_reference": "6ComputeNode-OracleJava-6.10.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-oracle-javafx-1:1.8.0.181-1jpp.2.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux HPC Node 6",
"product_id": "6ComputeNode-OracleJava-6.10.Z:java-1.8.0-oracle-javafx-1:1.8.0.181-1jpp.2.el6.i686"
},
"product_reference": "java-1.8.0-oracle-javafx-1:1.8.0.181-1jpp.2.el6.i686",
"relates_to_product_reference": "6ComputeNode-OracleJava-6.10.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-oracle-javafx-1:1.8.0.181-1jpp.2.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux HPC Node 6",
"product_id": "6ComputeNode-OracleJava-6.10.Z:java-1.8.0-oracle-javafx-1:1.8.0.181-1jpp.2.el6.x86_64"
},
"product_reference": "java-1.8.0-oracle-javafx-1:1.8.0.181-1jpp.2.el6.x86_64",
"relates_to_product_reference": "6ComputeNode-OracleJava-6.10.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-oracle-jdbc-1:1.8.0.181-1jpp.2.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux HPC Node 6",
"product_id": "6ComputeNode-OracleJava-6.10.Z:java-1.8.0-oracle-jdbc-1:1.8.0.181-1jpp.2.el6.i686"
},
"product_reference": "java-1.8.0-oracle-jdbc-1:1.8.0.181-1jpp.2.el6.i686",
"relates_to_product_reference": "6ComputeNode-OracleJava-6.10.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-oracle-jdbc-1:1.8.0.181-1jpp.2.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux HPC Node 6",
"product_id": "6ComputeNode-OracleJava-6.10.Z:java-1.8.0-oracle-jdbc-1:1.8.0.181-1jpp.2.el6.x86_64"
},
"product_reference": "java-1.8.0-oracle-jdbc-1:1.8.0.181-1jpp.2.el6.x86_64",
"relates_to_product_reference": "6ComputeNode-OracleJava-6.10.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-oracle-plugin-1:1.8.0.181-1jpp.2.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux HPC Node 6",
"product_id": "6ComputeNode-OracleJava-6.10.Z:java-1.8.0-oracle-plugin-1:1.8.0.181-1jpp.2.el6.i686"
},
"product_reference": "java-1.8.0-oracle-plugin-1:1.8.0.181-1jpp.2.el6.i686",
"relates_to_product_reference": "6ComputeNode-OracleJava-6.10.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-oracle-plugin-1:1.8.0.181-1jpp.2.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux HPC Node 6",
"product_id": "6ComputeNode-OracleJava-6.10.Z:java-1.8.0-oracle-plugin-1:1.8.0.181-1jpp.2.el6.x86_64"
},
"product_reference": "java-1.8.0-oracle-plugin-1:1.8.0.181-1jpp.2.el6.x86_64",
"relates_to_product_reference": "6ComputeNode-OracleJava-6.10.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-oracle-src-1:1.8.0.181-1jpp.2.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux HPC Node 6",
"product_id": "6ComputeNode-OracleJava-6.10.Z:java-1.8.0-oracle-src-1:1.8.0.181-1jpp.2.el6.i686"
},
"product_reference": "java-1.8.0-oracle-src-1:1.8.0.181-1jpp.2.el6.i686",
"relates_to_product_reference": "6ComputeNode-OracleJava-6.10.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-oracle-src-1:1.8.0.181-1jpp.2.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux HPC Node 6",
"product_id": "6ComputeNode-OracleJava-6.10.Z:java-1.8.0-oracle-src-1:1.8.0.181-1jpp.2.el6.x86_64"
},
"product_reference": "java-1.8.0-oracle-src-1:1.8.0.181-1jpp.2.el6.x86_64",
"relates_to_product_reference": "6ComputeNode-OracleJava-6.10.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux Server 6",
"product_id": "6Server-OracleJava-6.10.Z:java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el6.i686"
},
"product_reference": "java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el6.i686",
"relates_to_product_reference": "6Server-OracleJava-6.10.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Server 6",
"product_id": "6Server-OracleJava-6.10.Z:java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el6.x86_64"
},
"product_reference": "java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el6.x86_64",
"relates_to_product_reference": "6Server-OracleJava-6.10.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-oracle-devel-1:1.8.0.181-1jpp.2.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux Server 6",
"product_id": "6Server-OracleJava-6.10.Z:java-1.8.0-oracle-devel-1:1.8.0.181-1jpp.2.el6.i686"
},
"product_reference": "java-1.8.0-oracle-devel-1:1.8.0.181-1jpp.2.el6.i686",
"relates_to_product_reference": "6Server-OracleJava-6.10.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-oracle-devel-1:1.8.0.181-1jpp.2.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Server 6",
"product_id": "6Server-OracleJava-6.10.Z:java-1.8.0-oracle-devel-1:1.8.0.181-1jpp.2.el6.x86_64"
},
"product_reference": "java-1.8.0-oracle-devel-1:1.8.0.181-1jpp.2.el6.x86_64",
"relates_to_product_reference": "6Server-OracleJava-6.10.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-oracle-javafx-1:1.8.0.181-1jpp.2.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux Server 6",
"product_id": "6Server-OracleJava-6.10.Z:java-1.8.0-oracle-javafx-1:1.8.0.181-1jpp.2.el6.i686"
},
"product_reference": "java-1.8.0-oracle-javafx-1:1.8.0.181-1jpp.2.el6.i686",
"relates_to_product_reference": "6Server-OracleJava-6.10.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-oracle-javafx-1:1.8.0.181-1jpp.2.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Server 6",
"product_id": "6Server-OracleJava-6.10.Z:java-1.8.0-oracle-javafx-1:1.8.0.181-1jpp.2.el6.x86_64"
},
"product_reference": "java-1.8.0-oracle-javafx-1:1.8.0.181-1jpp.2.el6.x86_64",
"relates_to_product_reference": "6Server-OracleJava-6.10.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-oracle-jdbc-1:1.8.0.181-1jpp.2.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux Server 6",
"product_id": "6Server-OracleJava-6.10.Z:java-1.8.0-oracle-jdbc-1:1.8.0.181-1jpp.2.el6.i686"
},
"product_reference": "java-1.8.0-oracle-jdbc-1:1.8.0.181-1jpp.2.el6.i686",
"relates_to_product_reference": "6Server-OracleJava-6.10.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-oracle-jdbc-1:1.8.0.181-1jpp.2.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Server 6",
"product_id": "6Server-OracleJava-6.10.Z:java-1.8.0-oracle-jdbc-1:1.8.0.181-1jpp.2.el6.x86_64"
},
"product_reference": "java-1.8.0-oracle-jdbc-1:1.8.0.181-1jpp.2.el6.x86_64",
"relates_to_product_reference": "6Server-OracleJava-6.10.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-oracle-plugin-1:1.8.0.181-1jpp.2.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux Server 6",
"product_id": "6Server-OracleJava-6.10.Z:java-1.8.0-oracle-plugin-1:1.8.0.181-1jpp.2.el6.i686"
},
"product_reference": "java-1.8.0-oracle-plugin-1:1.8.0.181-1jpp.2.el6.i686",
"relates_to_product_reference": "6Server-OracleJava-6.10.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-oracle-plugin-1:1.8.0.181-1jpp.2.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Server 6",
"product_id": "6Server-OracleJava-6.10.Z:java-1.8.0-oracle-plugin-1:1.8.0.181-1jpp.2.el6.x86_64"
},
"product_reference": "java-1.8.0-oracle-plugin-1:1.8.0.181-1jpp.2.el6.x86_64",
"relates_to_product_reference": "6Server-OracleJava-6.10.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-oracle-src-1:1.8.0.181-1jpp.2.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux Server 6",
"product_id": "6Server-OracleJava-6.10.Z:java-1.8.0-oracle-src-1:1.8.0.181-1jpp.2.el6.i686"
},
"product_reference": "java-1.8.0-oracle-src-1:1.8.0.181-1jpp.2.el6.i686",
"relates_to_product_reference": "6Server-OracleJava-6.10.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-oracle-src-1:1.8.0.181-1jpp.2.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Server 6",
"product_id": "6Server-OracleJava-6.10.Z:java-1.8.0-oracle-src-1:1.8.0.181-1jpp.2.el6.x86_64"
},
"product_reference": "java-1.8.0-oracle-src-1:1.8.0.181-1jpp.2.el6.x86_64",
"relates_to_product_reference": "6Server-OracleJava-6.10.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux Workstation 6",
"product_id": "6Workstation-OracleJava-6.10.Z:java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el6.i686"
},
"product_reference": "java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el6.i686",
"relates_to_product_reference": "6Workstation-OracleJava-6.10.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Workstation 6",
"product_id": "6Workstation-OracleJava-6.10.Z:java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el6.x86_64"
},
"product_reference": "java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el6.x86_64",
"relates_to_product_reference": "6Workstation-OracleJava-6.10.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-oracle-devel-1:1.8.0.181-1jpp.2.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux Workstation 6",
"product_id": "6Workstation-OracleJava-6.10.Z:java-1.8.0-oracle-devel-1:1.8.0.181-1jpp.2.el6.i686"
},
"product_reference": "java-1.8.0-oracle-devel-1:1.8.0.181-1jpp.2.el6.i686",
"relates_to_product_reference": "6Workstation-OracleJava-6.10.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-oracle-devel-1:1.8.0.181-1jpp.2.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Workstation 6",
"product_id": "6Workstation-OracleJava-6.10.Z:java-1.8.0-oracle-devel-1:1.8.0.181-1jpp.2.el6.x86_64"
},
"product_reference": "java-1.8.0-oracle-devel-1:1.8.0.181-1jpp.2.el6.x86_64",
"relates_to_product_reference": "6Workstation-OracleJava-6.10.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-oracle-javafx-1:1.8.0.181-1jpp.2.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux Workstation 6",
"product_id": "6Workstation-OracleJava-6.10.Z:java-1.8.0-oracle-javafx-1:1.8.0.181-1jpp.2.el6.i686"
},
"product_reference": "java-1.8.0-oracle-javafx-1:1.8.0.181-1jpp.2.el6.i686",
"relates_to_product_reference": "6Workstation-OracleJava-6.10.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-oracle-javafx-1:1.8.0.181-1jpp.2.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Workstation 6",
"product_id": "6Workstation-OracleJava-6.10.Z:java-1.8.0-oracle-javafx-1:1.8.0.181-1jpp.2.el6.x86_64"
},
"product_reference": "java-1.8.0-oracle-javafx-1:1.8.0.181-1jpp.2.el6.x86_64",
"relates_to_product_reference": "6Workstation-OracleJava-6.10.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-oracle-jdbc-1:1.8.0.181-1jpp.2.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux Workstation 6",
"product_id": "6Workstation-OracleJava-6.10.Z:java-1.8.0-oracle-jdbc-1:1.8.0.181-1jpp.2.el6.i686"
},
"product_reference": "java-1.8.0-oracle-jdbc-1:1.8.0.181-1jpp.2.el6.i686",
"relates_to_product_reference": "6Workstation-OracleJava-6.10.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-oracle-jdbc-1:1.8.0.181-1jpp.2.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Workstation 6",
"product_id": "6Workstation-OracleJava-6.10.Z:java-1.8.0-oracle-jdbc-1:1.8.0.181-1jpp.2.el6.x86_64"
},
"product_reference": "java-1.8.0-oracle-jdbc-1:1.8.0.181-1jpp.2.el6.x86_64",
"relates_to_product_reference": "6Workstation-OracleJava-6.10.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-oracle-plugin-1:1.8.0.181-1jpp.2.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux Workstation 6",
"product_id": "6Workstation-OracleJava-6.10.Z:java-1.8.0-oracle-plugin-1:1.8.0.181-1jpp.2.el6.i686"
},
"product_reference": "java-1.8.0-oracle-plugin-1:1.8.0.181-1jpp.2.el6.i686",
"relates_to_product_reference": "6Workstation-OracleJava-6.10.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-oracle-plugin-1:1.8.0.181-1jpp.2.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Workstation 6",
"product_id": "6Workstation-OracleJava-6.10.Z:java-1.8.0-oracle-plugin-1:1.8.0.181-1jpp.2.el6.x86_64"
},
"product_reference": "java-1.8.0-oracle-plugin-1:1.8.0.181-1jpp.2.el6.x86_64",
"relates_to_product_reference": "6Workstation-OracleJava-6.10.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-oracle-src-1:1.8.0.181-1jpp.2.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux Workstation 6",
"product_id": "6Workstation-OracleJava-6.10.Z:java-1.8.0-oracle-src-1:1.8.0.181-1jpp.2.el6.i686"
},
"product_reference": "java-1.8.0-oracle-src-1:1.8.0.181-1jpp.2.el6.i686",
"relates_to_product_reference": "6Workstation-OracleJava-6.10.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-oracle-src-1:1.8.0.181-1jpp.2.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Workstation 6",
"product_id": "6Workstation-OracleJava-6.10.Z:java-1.8.0-oracle-src-1:1.8.0.181-1jpp.2.el6.x86_64"
},
"product_reference": "java-1.8.0-oracle-src-1:1.8.0.181-1jpp.2.el6.x86_64",
"relates_to_product_reference": "6Workstation-OracleJava-6.10.Z"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2018-2940",
"discovery_date": "2018-07-17T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1602146"
}
],
"notes": [
{
"category": "description",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries). Supported versions that are affected are Java SE: 6u191, 7u181, 8u172 and 10.0.1; Java SE Embedded: 8u171. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 4.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "JDK: unspecified vulnerability fixed in 6u201, 7u191, 8u181, and 10.0.2 (Libraries)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-OracleJava-6.10.Z:java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.8.0-oracle-devel-1:1.8.0.181-1jpp.2.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.8.0-oracle-devel-1:1.8.0.181-1jpp.2.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.8.0-oracle-javafx-1:1.8.0.181-1jpp.2.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.8.0-oracle-javafx-1:1.8.0.181-1jpp.2.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.8.0-oracle-jdbc-1:1.8.0.181-1jpp.2.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.8.0-oracle-jdbc-1:1.8.0.181-1jpp.2.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.8.0-oracle-plugin-1:1.8.0.181-1jpp.2.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.8.0-oracle-plugin-1:1.8.0.181-1jpp.2.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.8.0-oracle-src-1:1.8.0.181-1jpp.2.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.8.0-oracle-src-1:1.8.0.181-1jpp.2.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.8.0-oracle-devel-1:1.8.0.181-1jpp.2.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.8.0-oracle-devel-1:1.8.0.181-1jpp.2.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.8.0-oracle-javafx-1:1.8.0.181-1jpp.2.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.8.0-oracle-javafx-1:1.8.0.181-1jpp.2.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.8.0-oracle-jdbc-1:1.8.0.181-1jpp.2.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.8.0-oracle-jdbc-1:1.8.0.181-1jpp.2.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.8.0-oracle-plugin-1:1.8.0.181-1jpp.2.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.8.0-oracle-plugin-1:1.8.0.181-1jpp.2.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.8.0-oracle-src-1:1.8.0.181-1jpp.2.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.8.0-oracle-src-1:1.8.0.181-1jpp.2.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.8.0-oracle-devel-1:1.8.0.181-1jpp.2.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.8.0-oracle-devel-1:1.8.0.181-1jpp.2.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.8.0-oracle-javafx-1:1.8.0.181-1jpp.2.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.8.0-oracle-javafx-1:1.8.0.181-1jpp.2.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.8.0-oracle-jdbc-1:1.8.0.181-1jpp.2.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.8.0-oracle-jdbc-1:1.8.0.181-1jpp.2.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.8.0-oracle-plugin-1:1.8.0.181-1jpp.2.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.8.0-oracle-plugin-1:1.8.0.181-1jpp.2.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.8.0-oracle-src-1:1.8.0.181-1jpp.2.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.8.0-oracle-src-1:1.8.0.181-1jpp.2.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.8.0-oracle-devel-1:1.8.0.181-1jpp.2.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.8.0-oracle-devel-1:1.8.0.181-1jpp.2.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.8.0-oracle-javafx-1:1.8.0.181-1jpp.2.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.8.0-oracle-javafx-1:1.8.0.181-1jpp.2.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.8.0-oracle-jdbc-1:1.8.0.181-1jpp.2.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.8.0-oracle-jdbc-1:1.8.0.181-1jpp.2.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.8.0-oracle-plugin-1:1.8.0.181-1jpp.2.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.8.0-oracle-plugin-1:1.8.0.181-1jpp.2.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.8.0-oracle-src-1:1.8.0.181-1jpp.2.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.8.0-oracle-src-1:1.8.0.181-1jpp.2.el6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-2940"
},
{
"category": "external",
"summary": "RHBZ#1602146",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1602146"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-2940",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-2940"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2940",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2940"
},
{
"category": "external",
"summary": "http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html#AppendixJAVA",
"url": "http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html#AppendixJAVA"
}
],
"release_date": "2018-07-17T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-07-24T21:09:42+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.",
"product_ids": [
"6Client-OracleJava-6.10.Z:java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.8.0-oracle-devel-1:1.8.0.181-1jpp.2.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.8.0-oracle-devel-1:1.8.0.181-1jpp.2.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.8.0-oracle-javafx-1:1.8.0.181-1jpp.2.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.8.0-oracle-javafx-1:1.8.0.181-1jpp.2.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.8.0-oracle-jdbc-1:1.8.0.181-1jpp.2.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.8.0-oracle-jdbc-1:1.8.0.181-1jpp.2.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.8.0-oracle-plugin-1:1.8.0.181-1jpp.2.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.8.0-oracle-plugin-1:1.8.0.181-1jpp.2.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.8.0-oracle-src-1:1.8.0.181-1jpp.2.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.8.0-oracle-src-1:1.8.0.181-1jpp.2.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.8.0-oracle-devel-1:1.8.0.181-1jpp.2.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.8.0-oracle-devel-1:1.8.0.181-1jpp.2.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.8.0-oracle-javafx-1:1.8.0.181-1jpp.2.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.8.0-oracle-javafx-1:1.8.0.181-1jpp.2.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.8.0-oracle-jdbc-1:1.8.0.181-1jpp.2.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.8.0-oracle-jdbc-1:1.8.0.181-1jpp.2.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.8.0-oracle-plugin-1:1.8.0.181-1jpp.2.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.8.0-oracle-plugin-1:1.8.0.181-1jpp.2.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.8.0-oracle-src-1:1.8.0.181-1jpp.2.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.8.0-oracle-src-1:1.8.0.181-1jpp.2.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.8.0-oracle-devel-1:1.8.0.181-1jpp.2.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.8.0-oracle-devel-1:1.8.0.181-1jpp.2.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.8.0-oracle-javafx-1:1.8.0.181-1jpp.2.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.8.0-oracle-javafx-1:1.8.0.181-1jpp.2.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.8.0-oracle-jdbc-1:1.8.0.181-1jpp.2.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.8.0-oracle-jdbc-1:1.8.0.181-1jpp.2.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.8.0-oracle-plugin-1:1.8.0.181-1jpp.2.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.8.0-oracle-plugin-1:1.8.0.181-1jpp.2.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.8.0-oracle-src-1:1.8.0.181-1jpp.2.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.8.0-oracle-src-1:1.8.0.181-1jpp.2.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.8.0-oracle-devel-1:1.8.0.181-1jpp.2.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.8.0-oracle-devel-1:1.8.0.181-1jpp.2.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.8.0-oracle-javafx-1:1.8.0.181-1jpp.2.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.8.0-oracle-javafx-1:1.8.0.181-1jpp.2.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.8.0-oracle-jdbc-1:1.8.0.181-1jpp.2.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.8.0-oracle-jdbc-1:1.8.0.181-1jpp.2.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.8.0-oracle-plugin-1:1.8.0.181-1jpp.2.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.8.0-oracle-plugin-1:1.8.0.181-1jpp.2.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.8.0-oracle-src-1:1.8.0.181-1jpp.2.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.8.0-oracle-src-1:1.8.0.181-1jpp.2.el6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:2256"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"6Client-OracleJava-6.10.Z:java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.8.0-oracle-devel-1:1.8.0.181-1jpp.2.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.8.0-oracle-devel-1:1.8.0.181-1jpp.2.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.8.0-oracle-javafx-1:1.8.0.181-1jpp.2.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.8.0-oracle-javafx-1:1.8.0.181-1jpp.2.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.8.0-oracle-jdbc-1:1.8.0.181-1jpp.2.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.8.0-oracle-jdbc-1:1.8.0.181-1jpp.2.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.8.0-oracle-plugin-1:1.8.0.181-1jpp.2.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.8.0-oracle-plugin-1:1.8.0.181-1jpp.2.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.8.0-oracle-src-1:1.8.0.181-1jpp.2.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.8.0-oracle-src-1:1.8.0.181-1jpp.2.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.8.0-oracle-devel-1:1.8.0.181-1jpp.2.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.8.0-oracle-devel-1:1.8.0.181-1jpp.2.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.8.0-oracle-javafx-1:1.8.0.181-1jpp.2.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.8.0-oracle-javafx-1:1.8.0.181-1jpp.2.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.8.0-oracle-jdbc-1:1.8.0.181-1jpp.2.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.8.0-oracle-jdbc-1:1.8.0.181-1jpp.2.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.8.0-oracle-plugin-1:1.8.0.181-1jpp.2.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.8.0-oracle-plugin-1:1.8.0.181-1jpp.2.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.8.0-oracle-src-1:1.8.0.181-1jpp.2.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.8.0-oracle-src-1:1.8.0.181-1jpp.2.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.8.0-oracle-devel-1:1.8.0.181-1jpp.2.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.8.0-oracle-devel-1:1.8.0.181-1jpp.2.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.8.0-oracle-javafx-1:1.8.0.181-1jpp.2.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.8.0-oracle-javafx-1:1.8.0.181-1jpp.2.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.8.0-oracle-jdbc-1:1.8.0.181-1jpp.2.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.8.0-oracle-jdbc-1:1.8.0.181-1jpp.2.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.8.0-oracle-plugin-1:1.8.0.181-1jpp.2.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.8.0-oracle-plugin-1:1.8.0.181-1jpp.2.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.8.0-oracle-src-1:1.8.0.181-1jpp.2.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.8.0-oracle-src-1:1.8.0.181-1jpp.2.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.8.0-oracle-devel-1:1.8.0.181-1jpp.2.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.8.0-oracle-devel-1:1.8.0.181-1jpp.2.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.8.0-oracle-javafx-1:1.8.0.181-1jpp.2.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.8.0-oracle-javafx-1:1.8.0.181-1jpp.2.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.8.0-oracle-jdbc-1:1.8.0.181-1jpp.2.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.8.0-oracle-jdbc-1:1.8.0.181-1jpp.2.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.8.0-oracle-plugin-1:1.8.0.181-1jpp.2.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.8.0-oracle-plugin-1:1.8.0.181-1jpp.2.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.8.0-oracle-src-1:1.8.0.181-1jpp.2.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.8.0-oracle-src-1:1.8.0.181-1jpp.2.el6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "JDK: unspecified vulnerability fixed in 6u201, 7u191, 8u181, and 10.0.2 (Libraries)"
},
{
"cve": "CVE-2018-2941",
"discovery_date": "2018-07-17T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1602143"
}
],
"notes": [
{
"category": "description",
"text": "Vulnerability in the Java SE component of Oracle Java SE (subcomponent: JavaFX). Supported versions that are affected are Java SE: 7u181, 8u172 and 10.0.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 8.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "JDK: unspecified vulnerability fixed in 7u191, 8u181, and 10.0.2 (JavaFX)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-OracleJava-6.10.Z:java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.8.0-oracle-devel-1:1.8.0.181-1jpp.2.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.8.0-oracle-devel-1:1.8.0.181-1jpp.2.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.8.0-oracle-javafx-1:1.8.0.181-1jpp.2.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.8.0-oracle-javafx-1:1.8.0.181-1jpp.2.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.8.0-oracle-jdbc-1:1.8.0.181-1jpp.2.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.8.0-oracle-jdbc-1:1.8.0.181-1jpp.2.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.8.0-oracle-plugin-1:1.8.0.181-1jpp.2.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.8.0-oracle-plugin-1:1.8.0.181-1jpp.2.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.8.0-oracle-src-1:1.8.0.181-1jpp.2.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.8.0-oracle-src-1:1.8.0.181-1jpp.2.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.8.0-oracle-devel-1:1.8.0.181-1jpp.2.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.8.0-oracle-devel-1:1.8.0.181-1jpp.2.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.8.0-oracle-javafx-1:1.8.0.181-1jpp.2.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.8.0-oracle-javafx-1:1.8.0.181-1jpp.2.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.8.0-oracle-jdbc-1:1.8.0.181-1jpp.2.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.8.0-oracle-jdbc-1:1.8.0.181-1jpp.2.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.8.0-oracle-plugin-1:1.8.0.181-1jpp.2.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.8.0-oracle-plugin-1:1.8.0.181-1jpp.2.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.8.0-oracle-src-1:1.8.0.181-1jpp.2.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.8.0-oracle-src-1:1.8.0.181-1jpp.2.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.8.0-oracle-devel-1:1.8.0.181-1jpp.2.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.8.0-oracle-devel-1:1.8.0.181-1jpp.2.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.8.0-oracle-javafx-1:1.8.0.181-1jpp.2.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.8.0-oracle-javafx-1:1.8.0.181-1jpp.2.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.8.0-oracle-jdbc-1:1.8.0.181-1jpp.2.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.8.0-oracle-jdbc-1:1.8.0.181-1jpp.2.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.8.0-oracle-plugin-1:1.8.0.181-1jpp.2.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.8.0-oracle-plugin-1:1.8.0.181-1jpp.2.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.8.0-oracle-src-1:1.8.0.181-1jpp.2.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.8.0-oracle-src-1:1.8.0.181-1jpp.2.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.8.0-oracle-devel-1:1.8.0.181-1jpp.2.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.8.0-oracle-devel-1:1.8.0.181-1jpp.2.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.8.0-oracle-javafx-1:1.8.0.181-1jpp.2.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.8.0-oracle-javafx-1:1.8.0.181-1jpp.2.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.8.0-oracle-jdbc-1:1.8.0.181-1jpp.2.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.8.0-oracle-jdbc-1:1.8.0.181-1jpp.2.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.8.0-oracle-plugin-1:1.8.0.181-1jpp.2.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.8.0-oracle-plugin-1:1.8.0.181-1jpp.2.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.8.0-oracle-src-1:1.8.0.181-1jpp.2.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.8.0-oracle-src-1:1.8.0.181-1jpp.2.el6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-2941"
},
{
"category": "external",
"summary": "RHBZ#1602143",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1602143"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-2941",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-2941"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2941",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2941"
},
{
"category": "external",
"summary": "http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html#AppendixJAVA",
"url": "http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html#AppendixJAVA"
}
],
"release_date": "2018-07-17T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-07-24T21:09:42+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.",
"product_ids": [
"6Client-OracleJava-6.10.Z:java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.8.0-oracle-devel-1:1.8.0.181-1jpp.2.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.8.0-oracle-devel-1:1.8.0.181-1jpp.2.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.8.0-oracle-javafx-1:1.8.0.181-1jpp.2.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.8.0-oracle-javafx-1:1.8.0.181-1jpp.2.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.8.0-oracle-jdbc-1:1.8.0.181-1jpp.2.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.8.0-oracle-jdbc-1:1.8.0.181-1jpp.2.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.8.0-oracle-plugin-1:1.8.0.181-1jpp.2.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.8.0-oracle-plugin-1:1.8.0.181-1jpp.2.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.8.0-oracle-src-1:1.8.0.181-1jpp.2.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.8.0-oracle-src-1:1.8.0.181-1jpp.2.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.8.0-oracle-devel-1:1.8.0.181-1jpp.2.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.8.0-oracle-devel-1:1.8.0.181-1jpp.2.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.8.0-oracle-javafx-1:1.8.0.181-1jpp.2.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.8.0-oracle-javafx-1:1.8.0.181-1jpp.2.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.8.0-oracle-jdbc-1:1.8.0.181-1jpp.2.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.8.0-oracle-jdbc-1:1.8.0.181-1jpp.2.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.8.0-oracle-plugin-1:1.8.0.181-1jpp.2.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.8.0-oracle-plugin-1:1.8.0.181-1jpp.2.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.8.0-oracle-src-1:1.8.0.181-1jpp.2.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.8.0-oracle-src-1:1.8.0.181-1jpp.2.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.8.0-oracle-devel-1:1.8.0.181-1jpp.2.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.8.0-oracle-devel-1:1.8.0.181-1jpp.2.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.8.0-oracle-javafx-1:1.8.0.181-1jpp.2.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.8.0-oracle-javafx-1:1.8.0.181-1jpp.2.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.8.0-oracle-jdbc-1:1.8.0.181-1jpp.2.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.8.0-oracle-jdbc-1:1.8.0.181-1jpp.2.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.8.0-oracle-plugin-1:1.8.0.181-1jpp.2.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.8.0-oracle-plugin-1:1.8.0.181-1jpp.2.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.8.0-oracle-src-1:1.8.0.181-1jpp.2.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.8.0-oracle-src-1:1.8.0.181-1jpp.2.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.8.0-oracle-devel-1:1.8.0.181-1jpp.2.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.8.0-oracle-devel-1:1.8.0.181-1jpp.2.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.8.0-oracle-javafx-1:1.8.0.181-1jpp.2.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.8.0-oracle-javafx-1:1.8.0.181-1jpp.2.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.8.0-oracle-jdbc-1:1.8.0.181-1jpp.2.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.8.0-oracle-jdbc-1:1.8.0.181-1jpp.2.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.8.0-oracle-plugin-1:1.8.0.181-1jpp.2.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.8.0-oracle-plugin-1:1.8.0.181-1jpp.2.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.8.0-oracle-src-1:1.8.0.181-1jpp.2.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.8.0-oracle-src-1:1.8.0.181-1jpp.2.el6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:2256"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"6Client-OracleJava-6.10.Z:java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.8.0-oracle-devel-1:1.8.0.181-1jpp.2.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.8.0-oracle-devel-1:1.8.0.181-1jpp.2.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.8.0-oracle-javafx-1:1.8.0.181-1jpp.2.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.8.0-oracle-javafx-1:1.8.0.181-1jpp.2.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.8.0-oracle-jdbc-1:1.8.0.181-1jpp.2.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.8.0-oracle-jdbc-1:1.8.0.181-1jpp.2.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.8.0-oracle-plugin-1:1.8.0.181-1jpp.2.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.8.0-oracle-plugin-1:1.8.0.181-1jpp.2.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.8.0-oracle-src-1:1.8.0.181-1jpp.2.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.8.0-oracle-src-1:1.8.0.181-1jpp.2.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.8.0-oracle-devel-1:1.8.0.181-1jpp.2.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.8.0-oracle-devel-1:1.8.0.181-1jpp.2.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.8.0-oracle-javafx-1:1.8.0.181-1jpp.2.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.8.0-oracle-javafx-1:1.8.0.181-1jpp.2.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.8.0-oracle-jdbc-1:1.8.0.181-1jpp.2.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.8.0-oracle-jdbc-1:1.8.0.181-1jpp.2.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.8.0-oracle-plugin-1:1.8.0.181-1jpp.2.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.8.0-oracle-plugin-1:1.8.0.181-1jpp.2.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.8.0-oracle-src-1:1.8.0.181-1jpp.2.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.8.0-oracle-src-1:1.8.0.181-1jpp.2.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.8.0-oracle-devel-1:1.8.0.181-1jpp.2.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.8.0-oracle-devel-1:1.8.0.181-1jpp.2.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.8.0-oracle-javafx-1:1.8.0.181-1jpp.2.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.8.0-oracle-javafx-1:1.8.0.181-1jpp.2.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.8.0-oracle-jdbc-1:1.8.0.181-1jpp.2.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.8.0-oracle-jdbc-1:1.8.0.181-1jpp.2.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.8.0-oracle-plugin-1:1.8.0.181-1jpp.2.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.8.0-oracle-plugin-1:1.8.0.181-1jpp.2.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.8.0-oracle-src-1:1.8.0.181-1jpp.2.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.8.0-oracle-src-1:1.8.0.181-1jpp.2.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.8.0-oracle-devel-1:1.8.0.181-1jpp.2.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.8.0-oracle-devel-1:1.8.0.181-1jpp.2.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.8.0-oracle-javafx-1:1.8.0.181-1jpp.2.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.8.0-oracle-javafx-1:1.8.0.181-1jpp.2.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.8.0-oracle-jdbc-1:1.8.0.181-1jpp.2.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.8.0-oracle-jdbc-1:1.8.0.181-1jpp.2.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.8.0-oracle-plugin-1:1.8.0.181-1jpp.2.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.8.0-oracle-plugin-1:1.8.0.181-1jpp.2.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.8.0-oracle-src-1:1.8.0.181-1jpp.2.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.8.0-oracle-src-1:1.8.0.181-1jpp.2.el6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "JDK: unspecified vulnerability fixed in 7u191, 8u181, and 10.0.2 (JavaFX)"
},
{
"cve": "CVE-2018-2952",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2018-07-11T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1600925"
}
],
"notes": [
{
"category": "description",
"text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Concurrency). Supported versions that are affected are Java SE: 6u191, 7u181, 8u172 and 10.0.1; Java SE Embedded: 8u171; JRockit: R28.3.18. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 3.7 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK: insufficient index validation in PatternSyntaxException getMessage() (Concurrency, 8199547)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-OracleJava-6.10.Z:java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.8.0-oracle-devel-1:1.8.0.181-1jpp.2.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.8.0-oracle-devel-1:1.8.0.181-1jpp.2.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.8.0-oracle-javafx-1:1.8.0.181-1jpp.2.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.8.0-oracle-javafx-1:1.8.0.181-1jpp.2.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.8.0-oracle-jdbc-1:1.8.0.181-1jpp.2.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.8.0-oracle-jdbc-1:1.8.0.181-1jpp.2.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.8.0-oracle-plugin-1:1.8.0.181-1jpp.2.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.8.0-oracle-plugin-1:1.8.0.181-1jpp.2.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.8.0-oracle-src-1:1.8.0.181-1jpp.2.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.8.0-oracle-src-1:1.8.0.181-1jpp.2.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.8.0-oracle-devel-1:1.8.0.181-1jpp.2.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.8.0-oracle-devel-1:1.8.0.181-1jpp.2.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.8.0-oracle-javafx-1:1.8.0.181-1jpp.2.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.8.0-oracle-javafx-1:1.8.0.181-1jpp.2.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.8.0-oracle-jdbc-1:1.8.0.181-1jpp.2.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.8.0-oracle-jdbc-1:1.8.0.181-1jpp.2.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.8.0-oracle-plugin-1:1.8.0.181-1jpp.2.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.8.0-oracle-plugin-1:1.8.0.181-1jpp.2.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.8.0-oracle-src-1:1.8.0.181-1jpp.2.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.8.0-oracle-src-1:1.8.0.181-1jpp.2.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.8.0-oracle-devel-1:1.8.0.181-1jpp.2.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.8.0-oracle-devel-1:1.8.0.181-1jpp.2.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.8.0-oracle-javafx-1:1.8.0.181-1jpp.2.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.8.0-oracle-javafx-1:1.8.0.181-1jpp.2.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.8.0-oracle-jdbc-1:1.8.0.181-1jpp.2.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.8.0-oracle-jdbc-1:1.8.0.181-1jpp.2.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.8.0-oracle-plugin-1:1.8.0.181-1jpp.2.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.8.0-oracle-plugin-1:1.8.0.181-1jpp.2.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.8.0-oracle-src-1:1.8.0.181-1jpp.2.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.8.0-oracle-src-1:1.8.0.181-1jpp.2.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.8.0-oracle-devel-1:1.8.0.181-1jpp.2.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.8.0-oracle-devel-1:1.8.0.181-1jpp.2.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.8.0-oracle-javafx-1:1.8.0.181-1jpp.2.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.8.0-oracle-javafx-1:1.8.0.181-1jpp.2.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.8.0-oracle-jdbc-1:1.8.0.181-1jpp.2.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.8.0-oracle-jdbc-1:1.8.0.181-1jpp.2.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.8.0-oracle-plugin-1:1.8.0.181-1jpp.2.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.8.0-oracle-plugin-1:1.8.0.181-1jpp.2.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.8.0-oracle-src-1:1.8.0.181-1jpp.2.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.8.0-oracle-src-1:1.8.0.181-1jpp.2.el6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-2952"
},
{
"category": "external",
"summary": "RHBZ#1600925",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1600925"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-2952",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-2952"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2952",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2952"
}
],
"release_date": "2018-07-17T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-07-24T21:09:42+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.",
"product_ids": [
"6Client-OracleJava-6.10.Z:java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.8.0-oracle-devel-1:1.8.0.181-1jpp.2.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.8.0-oracle-devel-1:1.8.0.181-1jpp.2.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.8.0-oracle-javafx-1:1.8.0.181-1jpp.2.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.8.0-oracle-javafx-1:1.8.0.181-1jpp.2.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.8.0-oracle-jdbc-1:1.8.0.181-1jpp.2.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.8.0-oracle-jdbc-1:1.8.0.181-1jpp.2.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.8.0-oracle-plugin-1:1.8.0.181-1jpp.2.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.8.0-oracle-plugin-1:1.8.0.181-1jpp.2.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.8.0-oracle-src-1:1.8.0.181-1jpp.2.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.8.0-oracle-src-1:1.8.0.181-1jpp.2.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.8.0-oracle-devel-1:1.8.0.181-1jpp.2.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.8.0-oracle-devel-1:1.8.0.181-1jpp.2.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.8.0-oracle-javafx-1:1.8.0.181-1jpp.2.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.8.0-oracle-javafx-1:1.8.0.181-1jpp.2.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.8.0-oracle-jdbc-1:1.8.0.181-1jpp.2.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.8.0-oracle-jdbc-1:1.8.0.181-1jpp.2.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.8.0-oracle-plugin-1:1.8.0.181-1jpp.2.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.8.0-oracle-plugin-1:1.8.0.181-1jpp.2.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.8.0-oracle-src-1:1.8.0.181-1jpp.2.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.8.0-oracle-src-1:1.8.0.181-1jpp.2.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.8.0-oracle-devel-1:1.8.0.181-1jpp.2.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.8.0-oracle-devel-1:1.8.0.181-1jpp.2.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.8.0-oracle-javafx-1:1.8.0.181-1jpp.2.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.8.0-oracle-javafx-1:1.8.0.181-1jpp.2.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.8.0-oracle-jdbc-1:1.8.0.181-1jpp.2.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.8.0-oracle-jdbc-1:1.8.0.181-1jpp.2.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.8.0-oracle-plugin-1:1.8.0.181-1jpp.2.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.8.0-oracle-plugin-1:1.8.0.181-1jpp.2.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.8.0-oracle-src-1:1.8.0.181-1jpp.2.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.8.0-oracle-src-1:1.8.0.181-1jpp.2.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.8.0-oracle-devel-1:1.8.0.181-1jpp.2.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.8.0-oracle-devel-1:1.8.0.181-1jpp.2.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.8.0-oracle-javafx-1:1.8.0.181-1jpp.2.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.8.0-oracle-javafx-1:1.8.0.181-1jpp.2.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.8.0-oracle-jdbc-1:1.8.0.181-1jpp.2.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.8.0-oracle-jdbc-1:1.8.0.181-1jpp.2.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.8.0-oracle-plugin-1:1.8.0.181-1jpp.2.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.8.0-oracle-plugin-1:1.8.0.181-1jpp.2.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.8.0-oracle-src-1:1.8.0.181-1jpp.2.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.8.0-oracle-src-1:1.8.0.181-1jpp.2.el6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:2256"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 3.7,
"baseSeverity": "LOW",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"6Client-OracleJava-6.10.Z:java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.8.0-oracle-devel-1:1.8.0.181-1jpp.2.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.8.0-oracle-devel-1:1.8.0.181-1jpp.2.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.8.0-oracle-javafx-1:1.8.0.181-1jpp.2.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.8.0-oracle-javafx-1:1.8.0.181-1jpp.2.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.8.0-oracle-jdbc-1:1.8.0.181-1jpp.2.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.8.0-oracle-jdbc-1:1.8.0.181-1jpp.2.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.8.0-oracle-plugin-1:1.8.0.181-1jpp.2.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.8.0-oracle-plugin-1:1.8.0.181-1jpp.2.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.8.0-oracle-src-1:1.8.0.181-1jpp.2.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.8.0-oracle-src-1:1.8.0.181-1jpp.2.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.8.0-oracle-devel-1:1.8.0.181-1jpp.2.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.8.0-oracle-devel-1:1.8.0.181-1jpp.2.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.8.0-oracle-javafx-1:1.8.0.181-1jpp.2.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.8.0-oracle-javafx-1:1.8.0.181-1jpp.2.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.8.0-oracle-jdbc-1:1.8.0.181-1jpp.2.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.8.0-oracle-jdbc-1:1.8.0.181-1jpp.2.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.8.0-oracle-plugin-1:1.8.0.181-1jpp.2.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.8.0-oracle-plugin-1:1.8.0.181-1jpp.2.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.8.0-oracle-src-1:1.8.0.181-1jpp.2.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.8.0-oracle-src-1:1.8.0.181-1jpp.2.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.8.0-oracle-devel-1:1.8.0.181-1jpp.2.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.8.0-oracle-devel-1:1.8.0.181-1jpp.2.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.8.0-oracle-javafx-1:1.8.0.181-1jpp.2.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.8.0-oracle-javafx-1:1.8.0.181-1jpp.2.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.8.0-oracle-jdbc-1:1.8.0.181-1jpp.2.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.8.0-oracle-jdbc-1:1.8.0.181-1jpp.2.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.8.0-oracle-plugin-1:1.8.0.181-1jpp.2.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.8.0-oracle-plugin-1:1.8.0.181-1jpp.2.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.8.0-oracle-src-1:1.8.0.181-1jpp.2.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.8.0-oracle-src-1:1.8.0.181-1jpp.2.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.8.0-oracle-devel-1:1.8.0.181-1jpp.2.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.8.0-oracle-devel-1:1.8.0.181-1jpp.2.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.8.0-oracle-javafx-1:1.8.0.181-1jpp.2.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.8.0-oracle-javafx-1:1.8.0.181-1jpp.2.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.8.0-oracle-jdbc-1:1.8.0.181-1jpp.2.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.8.0-oracle-jdbc-1:1.8.0.181-1jpp.2.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.8.0-oracle-plugin-1:1.8.0.181-1jpp.2.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.8.0-oracle-plugin-1:1.8.0.181-1jpp.2.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.8.0-oracle-src-1:1.8.0.181-1jpp.2.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.8.0-oracle-src-1:1.8.0.181-1jpp.2.el6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "OpenJDK: insufficient index validation in PatternSyntaxException getMessage() (Concurrency, 8199547)"
},
{
"cve": "CVE-2018-2964",
"discovery_date": "2018-07-17T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1602142"
}
],
"notes": [
{
"category": "description",
"text": "Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Deployment). Supported versions that are affected are Java SE: 8u172 and 10.0.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 8.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "JDK: unspecified vulnerability fixed in 8u181 and 10.0.2 (Deployment)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-OracleJava-6.10.Z:java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.8.0-oracle-devel-1:1.8.0.181-1jpp.2.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.8.0-oracle-devel-1:1.8.0.181-1jpp.2.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.8.0-oracle-javafx-1:1.8.0.181-1jpp.2.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.8.0-oracle-javafx-1:1.8.0.181-1jpp.2.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.8.0-oracle-jdbc-1:1.8.0.181-1jpp.2.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.8.0-oracle-jdbc-1:1.8.0.181-1jpp.2.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.8.0-oracle-plugin-1:1.8.0.181-1jpp.2.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.8.0-oracle-plugin-1:1.8.0.181-1jpp.2.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.8.0-oracle-src-1:1.8.0.181-1jpp.2.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.8.0-oracle-src-1:1.8.0.181-1jpp.2.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.8.0-oracle-devel-1:1.8.0.181-1jpp.2.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.8.0-oracle-devel-1:1.8.0.181-1jpp.2.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.8.0-oracle-javafx-1:1.8.0.181-1jpp.2.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.8.0-oracle-javafx-1:1.8.0.181-1jpp.2.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.8.0-oracle-jdbc-1:1.8.0.181-1jpp.2.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.8.0-oracle-jdbc-1:1.8.0.181-1jpp.2.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.8.0-oracle-plugin-1:1.8.0.181-1jpp.2.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.8.0-oracle-plugin-1:1.8.0.181-1jpp.2.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.8.0-oracle-src-1:1.8.0.181-1jpp.2.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.8.0-oracle-src-1:1.8.0.181-1jpp.2.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.8.0-oracle-devel-1:1.8.0.181-1jpp.2.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.8.0-oracle-devel-1:1.8.0.181-1jpp.2.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.8.0-oracle-javafx-1:1.8.0.181-1jpp.2.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.8.0-oracle-javafx-1:1.8.0.181-1jpp.2.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.8.0-oracle-jdbc-1:1.8.0.181-1jpp.2.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.8.0-oracle-jdbc-1:1.8.0.181-1jpp.2.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.8.0-oracle-plugin-1:1.8.0.181-1jpp.2.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.8.0-oracle-plugin-1:1.8.0.181-1jpp.2.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.8.0-oracle-src-1:1.8.0.181-1jpp.2.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.8.0-oracle-src-1:1.8.0.181-1jpp.2.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.8.0-oracle-devel-1:1.8.0.181-1jpp.2.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.8.0-oracle-devel-1:1.8.0.181-1jpp.2.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.8.0-oracle-javafx-1:1.8.0.181-1jpp.2.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.8.0-oracle-javafx-1:1.8.0.181-1jpp.2.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.8.0-oracle-jdbc-1:1.8.0.181-1jpp.2.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.8.0-oracle-jdbc-1:1.8.0.181-1jpp.2.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.8.0-oracle-plugin-1:1.8.0.181-1jpp.2.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.8.0-oracle-plugin-1:1.8.0.181-1jpp.2.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.8.0-oracle-src-1:1.8.0.181-1jpp.2.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.8.0-oracle-src-1:1.8.0.181-1jpp.2.el6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-2964"
},
{
"category": "external",
"summary": "RHBZ#1602142",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1602142"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-2964",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-2964"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2964",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2964"
},
{
"category": "external",
"summary": "http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html#AppendixJAVA",
"url": "http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html#AppendixJAVA"
}
],
"release_date": "2018-07-17T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-07-24T21:09:42+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.",
"product_ids": [
"6Client-OracleJava-6.10.Z:java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.8.0-oracle-devel-1:1.8.0.181-1jpp.2.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.8.0-oracle-devel-1:1.8.0.181-1jpp.2.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.8.0-oracle-javafx-1:1.8.0.181-1jpp.2.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.8.0-oracle-javafx-1:1.8.0.181-1jpp.2.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.8.0-oracle-jdbc-1:1.8.0.181-1jpp.2.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.8.0-oracle-jdbc-1:1.8.0.181-1jpp.2.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.8.0-oracle-plugin-1:1.8.0.181-1jpp.2.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.8.0-oracle-plugin-1:1.8.0.181-1jpp.2.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.8.0-oracle-src-1:1.8.0.181-1jpp.2.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.8.0-oracle-src-1:1.8.0.181-1jpp.2.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.8.0-oracle-devel-1:1.8.0.181-1jpp.2.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.8.0-oracle-devel-1:1.8.0.181-1jpp.2.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.8.0-oracle-javafx-1:1.8.0.181-1jpp.2.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.8.0-oracle-javafx-1:1.8.0.181-1jpp.2.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.8.0-oracle-jdbc-1:1.8.0.181-1jpp.2.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.8.0-oracle-jdbc-1:1.8.0.181-1jpp.2.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.8.0-oracle-plugin-1:1.8.0.181-1jpp.2.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.8.0-oracle-plugin-1:1.8.0.181-1jpp.2.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.8.0-oracle-src-1:1.8.0.181-1jpp.2.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.8.0-oracle-src-1:1.8.0.181-1jpp.2.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.8.0-oracle-devel-1:1.8.0.181-1jpp.2.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.8.0-oracle-devel-1:1.8.0.181-1jpp.2.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.8.0-oracle-javafx-1:1.8.0.181-1jpp.2.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.8.0-oracle-javafx-1:1.8.0.181-1jpp.2.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.8.0-oracle-jdbc-1:1.8.0.181-1jpp.2.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.8.0-oracle-jdbc-1:1.8.0.181-1jpp.2.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.8.0-oracle-plugin-1:1.8.0.181-1jpp.2.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.8.0-oracle-plugin-1:1.8.0.181-1jpp.2.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.8.0-oracle-src-1:1.8.0.181-1jpp.2.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.8.0-oracle-src-1:1.8.0.181-1jpp.2.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.8.0-oracle-devel-1:1.8.0.181-1jpp.2.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.8.0-oracle-devel-1:1.8.0.181-1jpp.2.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.8.0-oracle-javafx-1:1.8.0.181-1jpp.2.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.8.0-oracle-javafx-1:1.8.0.181-1jpp.2.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.8.0-oracle-jdbc-1:1.8.0.181-1jpp.2.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.8.0-oracle-jdbc-1:1.8.0.181-1jpp.2.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.8.0-oracle-plugin-1:1.8.0.181-1jpp.2.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.8.0-oracle-plugin-1:1.8.0.181-1jpp.2.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.8.0-oracle-src-1:1.8.0.181-1jpp.2.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.8.0-oracle-src-1:1.8.0.181-1jpp.2.el6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:2256"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"6Client-OracleJava-6.10.Z:java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.8.0-oracle-devel-1:1.8.0.181-1jpp.2.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.8.0-oracle-devel-1:1.8.0.181-1jpp.2.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.8.0-oracle-javafx-1:1.8.0.181-1jpp.2.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.8.0-oracle-javafx-1:1.8.0.181-1jpp.2.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.8.0-oracle-jdbc-1:1.8.0.181-1jpp.2.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.8.0-oracle-jdbc-1:1.8.0.181-1jpp.2.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.8.0-oracle-plugin-1:1.8.0.181-1jpp.2.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.8.0-oracle-plugin-1:1.8.0.181-1jpp.2.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.8.0-oracle-src-1:1.8.0.181-1jpp.2.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.8.0-oracle-src-1:1.8.0.181-1jpp.2.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.8.0-oracle-devel-1:1.8.0.181-1jpp.2.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.8.0-oracle-devel-1:1.8.0.181-1jpp.2.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.8.0-oracle-javafx-1:1.8.0.181-1jpp.2.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.8.0-oracle-javafx-1:1.8.0.181-1jpp.2.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.8.0-oracle-jdbc-1:1.8.0.181-1jpp.2.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.8.0-oracle-jdbc-1:1.8.0.181-1jpp.2.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.8.0-oracle-plugin-1:1.8.0.181-1jpp.2.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.8.0-oracle-plugin-1:1.8.0.181-1jpp.2.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.8.0-oracle-src-1:1.8.0.181-1jpp.2.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.8.0-oracle-src-1:1.8.0.181-1jpp.2.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.8.0-oracle-devel-1:1.8.0.181-1jpp.2.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.8.0-oracle-devel-1:1.8.0.181-1jpp.2.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.8.0-oracle-javafx-1:1.8.0.181-1jpp.2.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.8.0-oracle-javafx-1:1.8.0.181-1jpp.2.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.8.0-oracle-jdbc-1:1.8.0.181-1jpp.2.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.8.0-oracle-jdbc-1:1.8.0.181-1jpp.2.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.8.0-oracle-plugin-1:1.8.0.181-1jpp.2.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.8.0-oracle-plugin-1:1.8.0.181-1jpp.2.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.8.0-oracle-src-1:1.8.0.181-1jpp.2.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.8.0-oracle-src-1:1.8.0.181-1jpp.2.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.8.0-oracle-devel-1:1.8.0.181-1jpp.2.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.8.0-oracle-devel-1:1.8.0.181-1jpp.2.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.8.0-oracle-javafx-1:1.8.0.181-1jpp.2.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.8.0-oracle-javafx-1:1.8.0.181-1jpp.2.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.8.0-oracle-jdbc-1:1.8.0.181-1jpp.2.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.8.0-oracle-jdbc-1:1.8.0.181-1jpp.2.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.8.0-oracle-plugin-1:1.8.0.181-1jpp.2.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.8.0-oracle-plugin-1:1.8.0.181-1jpp.2.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.8.0-oracle-src-1:1.8.0.181-1jpp.2.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.8.0-oracle-src-1:1.8.0.181-1jpp.2.el6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "JDK: unspecified vulnerability fixed in 8u181 and 10.0.2 (Deployment)"
},
{
"cve": "CVE-2018-2973",
"discovery_date": "2018-07-17T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1602145"
}
],
"notes": [
{
"category": "description",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: JSSE). Supported versions that are affected are Java SE: 6u191, 7u181, 8u172 and 10.0.1; Java SE Embedded: 8u171. Difficult to exploit vulnerability allows unauthenticated attacker with network access via SSL/TLS to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 5.9 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "JDK: unspecified vulnerability fixed in 6u201, 7u191, 8u181, and 10.0.2 (JSSE)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-OracleJava-6.10.Z:java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.8.0-oracle-devel-1:1.8.0.181-1jpp.2.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.8.0-oracle-devel-1:1.8.0.181-1jpp.2.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.8.0-oracle-javafx-1:1.8.0.181-1jpp.2.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.8.0-oracle-javafx-1:1.8.0.181-1jpp.2.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.8.0-oracle-jdbc-1:1.8.0.181-1jpp.2.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.8.0-oracle-jdbc-1:1.8.0.181-1jpp.2.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.8.0-oracle-plugin-1:1.8.0.181-1jpp.2.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.8.0-oracle-plugin-1:1.8.0.181-1jpp.2.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.8.0-oracle-src-1:1.8.0.181-1jpp.2.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.8.0-oracle-src-1:1.8.0.181-1jpp.2.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.8.0-oracle-devel-1:1.8.0.181-1jpp.2.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.8.0-oracle-devel-1:1.8.0.181-1jpp.2.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.8.0-oracle-javafx-1:1.8.0.181-1jpp.2.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.8.0-oracle-javafx-1:1.8.0.181-1jpp.2.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.8.0-oracle-jdbc-1:1.8.0.181-1jpp.2.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.8.0-oracle-jdbc-1:1.8.0.181-1jpp.2.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.8.0-oracle-plugin-1:1.8.0.181-1jpp.2.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.8.0-oracle-plugin-1:1.8.0.181-1jpp.2.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.8.0-oracle-src-1:1.8.0.181-1jpp.2.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.8.0-oracle-src-1:1.8.0.181-1jpp.2.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.8.0-oracle-devel-1:1.8.0.181-1jpp.2.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.8.0-oracle-devel-1:1.8.0.181-1jpp.2.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.8.0-oracle-javafx-1:1.8.0.181-1jpp.2.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.8.0-oracle-javafx-1:1.8.0.181-1jpp.2.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.8.0-oracle-jdbc-1:1.8.0.181-1jpp.2.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.8.0-oracle-jdbc-1:1.8.0.181-1jpp.2.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.8.0-oracle-plugin-1:1.8.0.181-1jpp.2.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.8.0-oracle-plugin-1:1.8.0.181-1jpp.2.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.8.0-oracle-src-1:1.8.0.181-1jpp.2.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.8.0-oracle-src-1:1.8.0.181-1jpp.2.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.8.0-oracle-devel-1:1.8.0.181-1jpp.2.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.8.0-oracle-devel-1:1.8.0.181-1jpp.2.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.8.0-oracle-javafx-1:1.8.0.181-1jpp.2.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.8.0-oracle-javafx-1:1.8.0.181-1jpp.2.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.8.0-oracle-jdbc-1:1.8.0.181-1jpp.2.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.8.0-oracle-jdbc-1:1.8.0.181-1jpp.2.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.8.0-oracle-plugin-1:1.8.0.181-1jpp.2.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.8.0-oracle-plugin-1:1.8.0.181-1jpp.2.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.8.0-oracle-src-1:1.8.0.181-1jpp.2.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.8.0-oracle-src-1:1.8.0.181-1jpp.2.el6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-2973"
},
{
"category": "external",
"summary": "RHBZ#1602145",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1602145"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-2973",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-2973"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2973",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2973"
},
{
"category": "external",
"summary": "http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html#AppendixJAVA",
"url": "http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html#AppendixJAVA"
}
],
"release_date": "2018-07-17T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-07-24T21:09:42+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.",
"product_ids": [
"6Client-OracleJava-6.10.Z:java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.8.0-oracle-devel-1:1.8.0.181-1jpp.2.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.8.0-oracle-devel-1:1.8.0.181-1jpp.2.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.8.0-oracle-javafx-1:1.8.0.181-1jpp.2.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.8.0-oracle-javafx-1:1.8.0.181-1jpp.2.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.8.0-oracle-jdbc-1:1.8.0.181-1jpp.2.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.8.0-oracle-jdbc-1:1.8.0.181-1jpp.2.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.8.0-oracle-plugin-1:1.8.0.181-1jpp.2.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.8.0-oracle-plugin-1:1.8.0.181-1jpp.2.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.8.0-oracle-src-1:1.8.0.181-1jpp.2.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.8.0-oracle-src-1:1.8.0.181-1jpp.2.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.8.0-oracle-devel-1:1.8.0.181-1jpp.2.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.8.0-oracle-devel-1:1.8.0.181-1jpp.2.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.8.0-oracle-javafx-1:1.8.0.181-1jpp.2.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.8.0-oracle-javafx-1:1.8.0.181-1jpp.2.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.8.0-oracle-jdbc-1:1.8.0.181-1jpp.2.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.8.0-oracle-jdbc-1:1.8.0.181-1jpp.2.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.8.0-oracle-plugin-1:1.8.0.181-1jpp.2.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.8.0-oracle-plugin-1:1.8.0.181-1jpp.2.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.8.0-oracle-src-1:1.8.0.181-1jpp.2.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.8.0-oracle-src-1:1.8.0.181-1jpp.2.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.8.0-oracle-devel-1:1.8.0.181-1jpp.2.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.8.0-oracle-devel-1:1.8.0.181-1jpp.2.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.8.0-oracle-javafx-1:1.8.0.181-1jpp.2.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.8.0-oracle-javafx-1:1.8.0.181-1jpp.2.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.8.0-oracle-jdbc-1:1.8.0.181-1jpp.2.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.8.0-oracle-jdbc-1:1.8.0.181-1jpp.2.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.8.0-oracle-plugin-1:1.8.0.181-1jpp.2.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.8.0-oracle-plugin-1:1.8.0.181-1jpp.2.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.8.0-oracle-src-1:1.8.0.181-1jpp.2.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.8.0-oracle-src-1:1.8.0.181-1jpp.2.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.8.0-oracle-devel-1:1.8.0.181-1jpp.2.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.8.0-oracle-devel-1:1.8.0.181-1jpp.2.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.8.0-oracle-javafx-1:1.8.0.181-1jpp.2.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.8.0-oracle-javafx-1:1.8.0.181-1jpp.2.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.8.0-oracle-jdbc-1:1.8.0.181-1jpp.2.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.8.0-oracle-jdbc-1:1.8.0.181-1jpp.2.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.8.0-oracle-plugin-1:1.8.0.181-1jpp.2.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.8.0-oracle-plugin-1:1.8.0.181-1jpp.2.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.8.0-oracle-src-1:1.8.0.181-1jpp.2.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.8.0-oracle-src-1:1.8.0.181-1jpp.2.el6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:2256"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.0"
},
"products": [
"6Client-OracleJava-6.10.Z:java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.8.0-oracle-devel-1:1.8.0.181-1jpp.2.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.8.0-oracle-devel-1:1.8.0.181-1jpp.2.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.8.0-oracle-javafx-1:1.8.0.181-1jpp.2.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.8.0-oracle-javafx-1:1.8.0.181-1jpp.2.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.8.0-oracle-jdbc-1:1.8.0.181-1jpp.2.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.8.0-oracle-jdbc-1:1.8.0.181-1jpp.2.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.8.0-oracle-plugin-1:1.8.0.181-1jpp.2.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.8.0-oracle-plugin-1:1.8.0.181-1jpp.2.el6.x86_64",
"6Client-OracleJava-6.10.Z:java-1.8.0-oracle-src-1:1.8.0.181-1jpp.2.el6.i686",
"6Client-OracleJava-6.10.Z:java-1.8.0-oracle-src-1:1.8.0.181-1jpp.2.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.8.0-oracle-devel-1:1.8.0.181-1jpp.2.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.8.0-oracle-devel-1:1.8.0.181-1jpp.2.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.8.0-oracle-javafx-1:1.8.0.181-1jpp.2.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.8.0-oracle-javafx-1:1.8.0.181-1jpp.2.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.8.0-oracle-jdbc-1:1.8.0.181-1jpp.2.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.8.0-oracle-jdbc-1:1.8.0.181-1jpp.2.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.8.0-oracle-plugin-1:1.8.0.181-1jpp.2.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.8.0-oracle-plugin-1:1.8.0.181-1jpp.2.el6.x86_64",
"6ComputeNode-OracleJava-6.10.Z:java-1.8.0-oracle-src-1:1.8.0.181-1jpp.2.el6.i686",
"6ComputeNode-OracleJava-6.10.Z:java-1.8.0-oracle-src-1:1.8.0.181-1jpp.2.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.8.0-oracle-devel-1:1.8.0.181-1jpp.2.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.8.0-oracle-devel-1:1.8.0.181-1jpp.2.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.8.0-oracle-javafx-1:1.8.0.181-1jpp.2.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.8.0-oracle-javafx-1:1.8.0.181-1jpp.2.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.8.0-oracle-jdbc-1:1.8.0.181-1jpp.2.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.8.0-oracle-jdbc-1:1.8.0.181-1jpp.2.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.8.0-oracle-plugin-1:1.8.0.181-1jpp.2.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.8.0-oracle-plugin-1:1.8.0.181-1jpp.2.el6.x86_64",
"6Server-OracleJava-6.10.Z:java-1.8.0-oracle-src-1:1.8.0.181-1jpp.2.el6.i686",
"6Server-OracleJava-6.10.Z:java-1.8.0-oracle-src-1:1.8.0.181-1jpp.2.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.8.0-oracle-1:1.8.0.181-1jpp.2.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.8.0-oracle-devel-1:1.8.0.181-1jpp.2.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.8.0-oracle-devel-1:1.8.0.181-1jpp.2.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.8.0-oracle-javafx-1:1.8.0.181-1jpp.2.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.8.0-oracle-javafx-1:1.8.0.181-1jpp.2.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.8.0-oracle-jdbc-1:1.8.0.181-1jpp.2.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.8.0-oracle-jdbc-1:1.8.0.181-1jpp.2.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.8.0-oracle-plugin-1:1.8.0.181-1jpp.2.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.8.0-oracle-plugin-1:1.8.0.181-1jpp.2.el6.x86_64",
"6Workstation-OracleJava-6.10.Z:java-1.8.0-oracle-src-1:1.8.0.181-1jpp.2.el6.i686",
"6Workstation-OracleJava-6.10.Z:java-1.8.0-oracle-src-1:1.8.0.181-1jpp.2.el6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "JDK: unspecified vulnerability fixed in 6u201, 7u191, 8u181, and 10.0.2 (JSSE)"
}
]
}
suse-su-2018:3064-2
Vulnerability from csaf_suse
Published
2018-10-18 12:51
Modified
2018-10-18 12:51
Summary
Security update for java-1_8_0-openjdk
Notes
Title of the patch
Security update for java-1_8_0-openjdk
Description of the patch
This update for java-1_8_0-openjdk to the jdk8u181 (icedtea 3.9.0) release fixes the following issues:
These security issues were fixed:
- CVE-2018-2938: Difficult to exploit vulnerability allowed unauthenticated
attacker with network access via multiple protocols to compromise Java SE.
Successful attacks of this vulnerability can result in takeover of Java SE
(bsc#1101644).
- CVE-2018-2940: Vulnerability in subcomponent: Libraries. Easily exploitable
vulnerability allowed unauthenticated attacker with network access via multiple
protocols to compromise Java SE, Java SE Embedded. Successful attacks require
human interaction from a person other than the attacker. Successful attacks of
this vulnerability can result in unauthorized read access to a subset of Java
SE, Java SE Embedded accessible data (bsc#1101645)
- CVE-2018-2952: Vulnerability in subcomponent: Concurrency. Difficult to
exploit vulnerability allowed unauthenticated attacker with network access via
multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful
attacks of this vulnerability can result in unauthorized ability to cause a
partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit
(bsc#1101651)
- CVE-2018-2973: Vulnerability in subcomponent: JSSE. Difficult to exploit
vulnerability allowed unauthenticated attacker with network access via SSL/TLS
to compromise Java SE, Java SE Embedded. Successful attacks of this
vulnerability can result in unauthorized creation, deletion or modification
access to critical data or all Java SE, Java SE Embedded accessible data
(bsc#1101656)
These non-security issues were fixed:
- Improve desktop file usage
- Better Internet address support
- speculative traps break when classes are redefined
- sun/security/pkcs11/ec/ReadCertificates.java fails intermittently
- Clean up code that saves the previous versions of redefined classes
- Prevent SIGSEGV in ReceiverTypeData::clean_weak_klass_links
- RedefineClasses() tests fail assert(((Metadata*)obj)->is_valid()) failed: obj is valid
- NMT is not enabled if NMT option is specified after class path specifiers
- EndEntityChecker should not process custom extensions after PKIX validation
- SupportedDSAParamGen.java failed with timeout
- Montgomery multiply intrinsic should use correct name
- When determining the ciphersuite lists, there is no debug output for disabled suites.
- sun/security/mscapi/SignedObjectChain.java fails on Windows
- On Windows Swing changes keyboard layout on a window activation
- IfNode::range_check_trap_proj() should handler dying subgraph with single if proj
- Even better Internet address support
- Newlines in JAXB string values of SOAP-requests are escaped to '
'
- TestFlushableGZIPOutputStream failing with IndexOutOfBoundsException
- Unable to use JDWP API in JDK 8 to debug JDK 9 VM
- Hotspot crash on Cassandra 3.11.1 startup with libnuma 2.0.3
- Performance drop with Java JDK 1.8.0_162-b32
- Upgrade time-zone data to tzdata2018d
- Fix potential crash in BufImg_SetupICM
- JDK 8u181 l10n resource file update
- Remove debug print statements from RMI fix
- (tz) Upgrade time-zone data to tzdata2018e
- ObjectInputStream filterCheck method throws NullPointerException
- adjust reflective access checks
Patchnames
SUSE-SLE-SERVER-12-SP2-BCL-2018-2168
Terms of use
CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for java-1_8_0-openjdk",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This update for java-1_8_0-openjdk to the jdk8u181 (icedtea 3.9.0) release fixes the following issues:\n\nThese security issues were fixed:\n\n- CVE-2018-2938: Difficult to exploit vulnerability allowed unauthenticated\n attacker with network access via multiple protocols to compromise Java SE.\n Successful attacks of this vulnerability can result in takeover of Java SE\n (bsc#1101644).\n- CVE-2018-2940: Vulnerability in subcomponent: Libraries. Easily exploitable\n vulnerability allowed unauthenticated attacker with network access via multiple\n protocols to compromise Java SE, Java SE Embedded. Successful attacks require\n human interaction from a person other than the attacker. Successful attacks of\n this vulnerability can result in unauthorized read access to a subset of Java\n SE, Java SE Embedded accessible data (bsc#1101645)\n- CVE-2018-2952: Vulnerability in subcomponent: Concurrency. Difficult to\n exploit vulnerability allowed unauthenticated attacker with network access via\n multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful\n attacks of this vulnerability can result in unauthorized ability to cause a\n partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit\n (bsc#1101651)\n- CVE-2018-2973: Vulnerability in subcomponent: JSSE. Difficult to exploit\n vulnerability allowed unauthenticated attacker with network access via SSL/TLS\n to compromise Java SE, Java SE Embedded. Successful attacks of this\n vulnerability can result in unauthorized creation, deletion or modification\n access to critical data or all Java SE, Java SE Embedded accessible data\n (bsc#1101656)\n\nThese non-security issues were fixed:\n\n- Improve desktop file usage\n- Better Internet address support\n- speculative traps break when classes are redefined\n- sun/security/pkcs11/ec/ReadCertificates.java fails intermittently\n- Clean up code that saves the previous versions of redefined classes\n- Prevent SIGSEGV in ReceiverTypeData::clean_weak_klass_links\n- RedefineClasses() tests fail assert(((Metadata*)obj)-\u003eis_valid()) failed: obj is valid\n- NMT is not enabled if NMT option is specified after class path specifiers\n- EndEntityChecker should not process custom extensions after PKIX validation\n- SupportedDSAParamGen.java failed with timeout\n- Montgomery multiply intrinsic should use correct name\n- When determining the ciphersuite lists, there is no debug output for disabled suites.\n- sun/security/mscapi/SignedObjectChain.java fails on Windows\n- On Windows Swing changes keyboard layout on a window activation\n- IfNode::range_check_trap_proj() should handler dying subgraph with single if proj\n- Even better Internet address support\n- Newlines in JAXB string values of SOAP-requests are escaped to \u0027\u0026#xa;\u0027\n- TestFlushableGZIPOutputStream failing with IndexOutOfBoundsException\n- Unable to use JDWP API in JDK 8 to debug JDK 9 VM\n- Hotspot crash on Cassandra 3.11.1 startup with libnuma 2.0.3\n- Performance drop with Java JDK 1.8.0_162-b32\n- Upgrade time-zone data to tzdata2018d\n- Fix potential crash in BufImg_SetupICM\n- JDK 8u181 l10n resource file update\n- Remove debug print statements from RMI fix\n- (tz) Upgrade time-zone data to tzdata2018e\n- ObjectInputStream filterCheck method throws NullPointerException\n- adjust reflective access checks\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "SUSE-SLE-SERVER-12-SP2-BCL-2018-2168",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2018_3064-2.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2018:3064-2",
"url": "https://www.suse.com/support/update/announcement/2018/suse-su-20183064-2/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2018:3064-2",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2018-October/004728.html"
},
{
"category": "self",
"summary": "SUSE Bug 1101644",
"url": "https://bugzilla.suse.com/1101644"
},
{
"category": "self",
"summary": "SUSE Bug 1101645",
"url": "https://bugzilla.suse.com/1101645"
},
{
"category": "self",
"summary": "SUSE Bug 1101651",
"url": "https://bugzilla.suse.com/1101651"
},
{
"category": "self",
"summary": "SUSE Bug 1101656",
"url": "https://bugzilla.suse.com/1101656"
},
{
"category": "self",
"summary": "SUSE Bug 1106812",
"url": "https://bugzilla.suse.com/1106812"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-2938 page",
"url": "https://www.suse.com/security/cve/CVE-2018-2938/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-2940 page",
"url": "https://www.suse.com/security/cve/CVE-2018-2940/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-2952 page",
"url": "https://www.suse.com/security/cve/CVE-2018-2952/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-2973 page",
"url": "https://www.suse.com/security/cve/CVE-2018-2973/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-3639 page",
"url": "https://www.suse.com/security/cve/CVE-2018-3639/"
}
],
"title": "Security update for java-1_8_0-openjdk",
"tracking": {
"current_release_date": "2018-10-18T12:51:18Z",
"generator": {
"date": "2018-10-18T12:51:18Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2018:3064-2",
"initial_release_date": "2018-10-18T12:51:18Z",
"revision_history": [
{
"date": "2018-10-18T12:51:18Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "java-1_8_0-openjdk-1.8.0.181-27.26.2.x86_64",
"product": {
"name": "java-1_8_0-openjdk-1.8.0.181-27.26.2.x86_64",
"product_id": "java-1_8_0-openjdk-1.8.0.181-27.26.2.x86_64"
}
},
{
"category": "product_version",
"name": "java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.x86_64",
"product": {
"name": "java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.x86_64",
"product_id": "java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.x86_64"
}
},
{
"category": "product_version",
"name": "java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.x86_64",
"product": {
"name": "java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.x86_64",
"product_id": "java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.x86_64"
}
},
{
"category": "product_version",
"name": "java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.x86_64",
"product": {
"name": "java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.x86_64",
"product_id": "java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 12 SP2-BCL",
"product": {
"name": "SUSE Linux Enterprise Server 12 SP2-BCL",
"product_id": "SUSE Linux Enterprise Server 12 SP2-BCL",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles-bcl:12:sp2"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-1.8.0.181-27.26.2.x86_64 as component of SUSE Linux Enterprise Server 12 SP2-BCL",
"product_id": "SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-openjdk-1.8.0.181-27.26.2.x86_64"
},
"product_reference": "java-1_8_0-openjdk-1.8.0.181-27.26.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2-BCL"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.x86_64 as component of SUSE Linux Enterprise Server 12 SP2-BCL",
"product_id": "SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.x86_64"
},
"product_reference": "java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2-BCL"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.x86_64 as component of SUSE Linux Enterprise Server 12 SP2-BCL",
"product_id": "SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.x86_64"
},
"product_reference": "java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2-BCL"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.x86_64 as component of SUSE Linux Enterprise Server 12 SP2-BCL",
"product_id": "SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.x86_64"
},
"product_reference": "java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2-BCL"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2018-2938",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-2938"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Java DB). Supported versions that are affected are Java SE: 6u191, 7u181 and 8u172. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. While the vulnerability is in Java SE, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVE-2018-2938 addresses CVE-2018-1313. CVSS 3.0 Base Score 9.0 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-openjdk-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-2938",
"url": "https://www.suse.com/security/cve/CVE-2018-2938"
},
{
"category": "external",
"summary": "SUSE Bug 1101644 for CVE-2018-2938",
"url": "https://bugzilla.suse.com/1101644"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-openjdk-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-openjdk-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-10-18T12:51:18Z",
"details": "important"
}
],
"title": "CVE-2018-2938"
},
{
"cve": "CVE-2018-2940",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-2940"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries). Supported versions that are affected are Java SE: 6u191, 7u181, 8u172 and 10.0.1; Java SE Embedded: 8u171. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 4.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-openjdk-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-2940",
"url": "https://www.suse.com/security/cve/CVE-2018-2940"
},
{
"category": "external",
"summary": "SUSE Bug 1101645 for CVE-2018-2940",
"url": "https://bugzilla.suse.com/1101645"
},
{
"category": "external",
"summary": "SUSE Bug 1101656 for CVE-2018-2940",
"url": "https://bugzilla.suse.com/1101656"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-openjdk-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-openjdk-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-10-18T12:51:18Z",
"details": "moderate"
}
],
"title": "CVE-2018-2940"
},
{
"cve": "CVE-2018-2952",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-2952"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Concurrency). Supported versions that are affected are Java SE: 6u191, 7u181, 8u172 and 10.0.1; Java SE Embedded: 8u171; JRockit: R28.3.18. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 3.7 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-openjdk-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-2952",
"url": "https://www.suse.com/security/cve/CVE-2018-2952"
},
{
"category": "external",
"summary": "SUSE Bug 1101645 for CVE-2018-2952",
"url": "https://bugzilla.suse.com/1101645"
},
{
"category": "external",
"summary": "SUSE Bug 1101651 for CVE-2018-2952",
"url": "https://bugzilla.suse.com/1101651"
},
{
"category": "external",
"summary": "SUSE Bug 1101656 for CVE-2018-2952",
"url": "https://bugzilla.suse.com/1101656"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-openjdk-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-openjdk-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-10-18T12:51:18Z",
"details": "important"
}
],
"title": "CVE-2018-2952"
},
{
"cve": "CVE-2018-2973",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-2973"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: JSSE). Supported versions that are affected are Java SE: 6u191, 7u181, 8u172 and 10.0.1; Java SE Embedded: 8u171. Difficult to exploit vulnerability allows unauthenticated attacker with network access via SSL/TLS to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 5.9 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-openjdk-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-2973",
"url": "https://www.suse.com/security/cve/CVE-2018-2973"
},
{
"category": "external",
"summary": "SUSE Bug 1101645 for CVE-2018-2973",
"url": "https://bugzilla.suse.com/1101645"
},
{
"category": "external",
"summary": "SUSE Bug 1101656 for CVE-2018-2973",
"url": "https://bugzilla.suse.com/1101656"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-openjdk-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-openjdk-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-10-18T12:51:18Z",
"details": "moderate"
}
],
"title": "CVE-2018-2973"
},
{
"cve": "CVE-2018-3639",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-3639"
}
],
"notes": [
{
"category": "general",
"text": "Systems with microprocessors utilizing speculative execution and speculative execution of memory reads before the addresses of all prior memory writes are known may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis, aka Speculative Store Bypass (SSB), Variant 4.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-openjdk-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-3639",
"url": "https://www.suse.com/security/cve/CVE-2018-3639"
},
{
"category": "external",
"summary": "SUSE Bug 1074701 for CVE-2018-3639",
"url": "https://bugzilla.suse.com/1074701"
},
{
"category": "external",
"summary": "SUSE Bug 1085235 for CVE-2018-3639",
"url": "https://bugzilla.suse.com/1085235"
},
{
"category": "external",
"summary": "SUSE Bug 1085308 for CVE-2018-3639",
"url": "https://bugzilla.suse.com/1085308"
},
{
"category": "external",
"summary": "SUSE Bug 1087078 for CVE-2018-3639",
"url": "https://bugzilla.suse.com/1087078"
},
{
"category": "external",
"summary": "SUSE Bug 1087082 for CVE-2018-3639",
"url": "https://bugzilla.suse.com/1087082"
},
{
"category": "external",
"summary": "SUSE Bug 1092631 for CVE-2018-3639",
"url": "https://bugzilla.suse.com/1092631"
},
{
"category": "external",
"summary": "SUSE Bug 1092885 for CVE-2018-3639",
"url": "https://bugzilla.suse.com/1092885"
},
{
"category": "external",
"summary": "SUSE Bug 1094912 for CVE-2018-3639",
"url": "https://bugzilla.suse.com/1094912"
},
{
"category": "external",
"summary": "SUSE Bug 1098813 for CVE-2018-3639",
"url": "https://bugzilla.suse.com/1098813"
},
{
"category": "external",
"summary": "SUSE Bug 1100394 for CVE-2018-3639",
"url": "https://bugzilla.suse.com/1100394"
},
{
"category": "external",
"summary": "SUSE Bug 1102640 for CVE-2018-3639",
"url": "https://bugzilla.suse.com/1102640"
},
{
"category": "external",
"summary": "SUSE Bug 1105412 for CVE-2018-3639",
"url": "https://bugzilla.suse.com/1105412"
},
{
"category": "external",
"summary": "SUSE Bug 1111963 for CVE-2018-3639",
"url": "https://bugzilla.suse.com/1111963"
},
{
"category": "external",
"summary": "SUSE Bug 1172781 for CVE-2018-3639",
"url": "https://bugzilla.suse.com/1172781"
},
{
"category": "external",
"summary": "SUSE Bug 1172782 for CVE-2018-3639",
"url": "https://bugzilla.suse.com/1172782"
},
{
"category": "external",
"summary": "SUSE Bug 1172783 for CVE-2018-3639",
"url": "https://bugzilla.suse.com/1172783"
},
{
"category": "external",
"summary": "SUSE Bug 1173489 for CVE-2018-3639",
"url": "https://bugzilla.suse.com/1173489"
},
{
"category": "external",
"summary": "SUSE Bug 1178658 for CVE-2018-3639",
"url": "https://bugzilla.suse.com/1178658"
},
{
"category": "external",
"summary": "SUSE Bug 1201877 for CVE-2018-3639",
"url": "https://bugzilla.suse.com/1201877"
},
{
"category": "external",
"summary": "SUSE Bug 1215674 for CVE-2018-3639",
"url": "https://bugzilla.suse.com/1215674"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-openjdk-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-openjdk-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-10-18T12:51:18Z",
"details": "moderate"
}
],
"title": "CVE-2018-3639"
}
]
}
suse-su-2018:3045-1
Vulnerability from csaf_suse
Published
2018-10-05 13:22
Modified
2018-10-05 13:22
Summary
Security update for java-1_8_0-openjdk
Notes
Title of the patch
Security update for java-1_8_0-openjdk
Description of the patch
This update for java-1_8_0-openjdk to the jdk8u181 (icedtea 3.9.0) release fixes the following issues:
These security issues were fixed:
- CVE-2018-2938: Difficult to exploit vulnerability allowed unauthenticated
attacker with network access via multiple protocols to compromise Java SE.
Successful attacks of this vulnerability can result in takeover of Java SE
(bsc#1101644).
- CVE-2018-2940: Vulnerability in subcomponent: Libraries. Easily exploitable
vulnerability allowed unauthenticated attacker with network access via multiple
protocols to compromise Java SE, Java SE Embedded. Successful attacks require
human interaction from a person other than the attacker. Successful attacks of
this vulnerability can result in unauthorized read access to a subset of Java
SE, Java SE Embedded accessible data (bsc#1101645)
- CVE-2018-2952: Vulnerability in subcomponent: Concurrency. Difficult to
exploit vulnerability allowed unauthenticated attacker with network access via
multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful
attacks of this vulnerability can result in unauthorized ability to cause a
partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit
(bsc#1101651)
- CVE-2018-2973: Vulnerability in subcomponent: JSSE. Difficult to exploit
vulnerability allowed unauthenticated attacker with network access via SSL/TLS
to compromise Java SE, Java SE Embedded. Successful attacks of this
vulnerability can result in unauthorized creation, deletion or modification
access to critical data or all Java SE, Java SE Embedded accessible data
(bsc#1101656)
These non-security issues were fixed:
- Improve desktop file usage
- Better Internet address support
- speculative traps break when classes are redefined
- sun/security/pkcs11/ec/ReadCertificates.java fails intermittently
- Clean up code that saves the previous versions of redefined classes
- Prevent SIGSEGV in ReceiverTypeData::clean_weak_klass_links
- RedefineClasses() tests fail assert(((Metadata*)obj)->is_valid()) failed: obj is valid
- NMT is not enabled if NMT option is specified after class path specifiers
- EndEntityChecker should not process custom extensions after PKIX validation
- SupportedDSAParamGen.java failed with timeout
- Montgomery multiply intrinsic should use correct name
- When determining the ciphersuite lists, there is no debug output for disabled suites.
- sun/security/mscapi/SignedObjectChain.java fails on Windows
- On Windows Swing changes keyboard layout on a window activation
- IfNode::range_check_trap_proj() should handler dying subgraph with single if proj
- Even better Internet address support
- Newlines in JAXB string values of SOAP-requests are escaped to '
'
- TestFlushableGZIPOutputStream failing with IndexOutOfBoundsException
- Unable to use JDWP API in JDK 8 to debug JDK 9 VM
- Hotspot crash on Cassandra 3.11.1 startup with libnuma 2.0.3
- Performance drop with Java JDK 1.8.0_162-b32
- Upgrade time-zone data to tzdata2018d
- Fix potential crash in BufImg_SetupICM
- JDK 8u181 l10n resource file update
- Remove debug print statements from RMI fix
- (tz) Upgrade time-zone data to tzdata2018e
- ObjectInputStream filterCheck method throws NullPointerException
- adjust reflective access checks
- Fixed builds on s390 (bsc#1106812)
Patchnames
SUSE-SLE-Module-Legacy-15-2018-2165
Terms of use
CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for java-1_8_0-openjdk",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This update for java-1_8_0-openjdk to the jdk8u181 (icedtea 3.9.0) release fixes the following issues:\n\nThese security issues were fixed:\n\n- CVE-2018-2938: Difficult to exploit vulnerability allowed unauthenticated\n attacker with network access via multiple protocols to compromise Java SE.\n Successful attacks of this vulnerability can result in takeover of Java SE\n (bsc#1101644).\n- CVE-2018-2940: Vulnerability in subcomponent: Libraries. Easily exploitable\n vulnerability allowed unauthenticated attacker with network access via multiple\n protocols to compromise Java SE, Java SE Embedded. Successful attacks require\n human interaction from a person other than the attacker. Successful attacks of\n this vulnerability can result in unauthorized read access to a subset of Java\n SE, Java SE Embedded accessible data (bsc#1101645)\n- CVE-2018-2952: Vulnerability in subcomponent: Concurrency. Difficult to\n exploit vulnerability allowed unauthenticated attacker with network access via\n multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful\n attacks of this vulnerability can result in unauthorized ability to cause a\n partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit\n (bsc#1101651)\n- CVE-2018-2973: Vulnerability in subcomponent: JSSE. Difficult to exploit\n vulnerability allowed unauthenticated attacker with network access via SSL/TLS\n to compromise Java SE, Java SE Embedded. Successful attacks of this\n vulnerability can result in unauthorized creation, deletion or modification\n access to critical data or all Java SE, Java SE Embedded accessible data\n (bsc#1101656)\n\nThese non-security issues were fixed:\n\n- Improve desktop file usage\n- Better Internet address support\n- speculative traps break when classes are redefined\n- sun/security/pkcs11/ec/ReadCertificates.java fails intermittently\n- Clean up code that saves the previous versions of redefined classes\n- Prevent SIGSEGV in ReceiverTypeData::clean_weak_klass_links\n- RedefineClasses() tests fail assert(((Metadata*)obj)-\u003eis_valid()) failed: obj is valid\n- NMT is not enabled if NMT option is specified after class path specifiers\n- EndEntityChecker should not process custom extensions after PKIX validation\n- SupportedDSAParamGen.java failed with timeout\n- Montgomery multiply intrinsic should use correct name\n- When determining the ciphersuite lists, there is no debug output for disabled suites.\n- sun/security/mscapi/SignedObjectChain.java fails on Windows\n- On Windows Swing changes keyboard layout on a window activation\n- IfNode::range_check_trap_proj() should handler dying subgraph with single if proj\n- Even better Internet address support\n- Newlines in JAXB string values of SOAP-requests are escaped to \u0027\u0026#xa;\u0027\n- TestFlushableGZIPOutputStream failing with IndexOutOfBoundsException\n- Unable to use JDWP API in JDK 8 to debug JDK 9 VM\n- Hotspot crash on Cassandra 3.11.1 startup with libnuma 2.0.3\n- Performance drop with Java JDK 1.8.0_162-b32\n- Upgrade time-zone data to tzdata2018d\n- Fix potential crash in BufImg_SetupICM\n- JDK 8u181 l10n resource file update\n- Remove debug print statements from RMI fix\n- (tz) Upgrade time-zone data to tzdata2018e\n- ObjectInputStream filterCheck method throws NullPointerException\n- adjust reflective access checks\n- Fixed builds on s390 (bsc#1106812)\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "SUSE-SLE-Module-Legacy-15-2018-2165",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2018_3045-1.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2018:3045-1",
"url": "https://www.suse.com/support/update/announcement/2018/suse-su-20183045-1/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2018:3045-1",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2018-October/004648.html"
},
{
"category": "self",
"summary": "SUSE Bug 1101644",
"url": "https://bugzilla.suse.com/1101644"
},
{
"category": "self",
"summary": "SUSE Bug 1101645",
"url": "https://bugzilla.suse.com/1101645"
},
{
"category": "self",
"summary": "SUSE Bug 1101651",
"url": "https://bugzilla.suse.com/1101651"
},
{
"category": "self",
"summary": "SUSE Bug 1101656",
"url": "https://bugzilla.suse.com/1101656"
},
{
"category": "self",
"summary": "SUSE Bug 1106812",
"url": "https://bugzilla.suse.com/1106812"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-2938 page",
"url": "https://www.suse.com/security/cve/CVE-2018-2938/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-2940 page",
"url": "https://www.suse.com/security/cve/CVE-2018-2940/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-2952 page",
"url": "https://www.suse.com/security/cve/CVE-2018-2952/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-2973 page",
"url": "https://www.suse.com/security/cve/CVE-2018-2973/"
}
],
"title": "Security update for java-1_8_0-openjdk",
"tracking": {
"current_release_date": "2018-10-05T13:22:42Z",
"generator": {
"date": "2018-10-05T13:22:42Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2018:3045-1",
"initial_release_date": "2018-10-05T13:22:42Z",
"revision_history": [
{
"date": "2018-10-05T13:22:42Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "java-1_8_0-openjdk-1.8.0.181-3.10.1.aarch64",
"product": {
"name": "java-1_8_0-openjdk-1.8.0.181-3.10.1.aarch64",
"product_id": "java-1_8_0-openjdk-1.8.0.181-3.10.1.aarch64"
}
},
{
"category": "product_version",
"name": "java-1_8_0-openjdk-demo-1.8.0.181-3.10.1.aarch64",
"product": {
"name": "java-1_8_0-openjdk-demo-1.8.0.181-3.10.1.aarch64",
"product_id": "java-1_8_0-openjdk-demo-1.8.0.181-3.10.1.aarch64"
}
},
{
"category": "product_version",
"name": "java-1_8_0-openjdk-devel-1.8.0.181-3.10.1.aarch64",
"product": {
"name": "java-1_8_0-openjdk-devel-1.8.0.181-3.10.1.aarch64",
"product_id": "java-1_8_0-openjdk-devel-1.8.0.181-3.10.1.aarch64"
}
},
{
"category": "product_version",
"name": "java-1_8_0-openjdk-headless-1.8.0.181-3.10.1.aarch64",
"product": {
"name": "java-1_8_0-openjdk-headless-1.8.0.181-3.10.1.aarch64",
"product_id": "java-1_8_0-openjdk-headless-1.8.0.181-3.10.1.aarch64"
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "java-1_8_0-openjdk-1.8.0.181-3.10.1.ppc64le",
"product": {
"name": "java-1_8_0-openjdk-1.8.0.181-3.10.1.ppc64le",
"product_id": "java-1_8_0-openjdk-1.8.0.181-3.10.1.ppc64le"
}
},
{
"category": "product_version",
"name": "java-1_8_0-openjdk-demo-1.8.0.181-3.10.1.ppc64le",
"product": {
"name": "java-1_8_0-openjdk-demo-1.8.0.181-3.10.1.ppc64le",
"product_id": "java-1_8_0-openjdk-demo-1.8.0.181-3.10.1.ppc64le"
}
},
{
"category": "product_version",
"name": "java-1_8_0-openjdk-devel-1.8.0.181-3.10.1.ppc64le",
"product": {
"name": "java-1_8_0-openjdk-devel-1.8.0.181-3.10.1.ppc64le",
"product_id": "java-1_8_0-openjdk-devel-1.8.0.181-3.10.1.ppc64le"
}
},
{
"category": "product_version",
"name": "java-1_8_0-openjdk-headless-1.8.0.181-3.10.1.ppc64le",
"product": {
"name": "java-1_8_0-openjdk-headless-1.8.0.181-3.10.1.ppc64le",
"product_id": "java-1_8_0-openjdk-headless-1.8.0.181-3.10.1.ppc64le"
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "java-1_8_0-openjdk-1.8.0.181-3.10.1.s390x",
"product": {
"name": "java-1_8_0-openjdk-1.8.0.181-3.10.1.s390x",
"product_id": "java-1_8_0-openjdk-1.8.0.181-3.10.1.s390x"
}
},
{
"category": "product_version",
"name": "java-1_8_0-openjdk-demo-1.8.0.181-3.10.1.s390x",
"product": {
"name": "java-1_8_0-openjdk-demo-1.8.0.181-3.10.1.s390x",
"product_id": "java-1_8_0-openjdk-demo-1.8.0.181-3.10.1.s390x"
}
},
{
"category": "product_version",
"name": "java-1_8_0-openjdk-devel-1.8.0.181-3.10.1.s390x",
"product": {
"name": "java-1_8_0-openjdk-devel-1.8.0.181-3.10.1.s390x",
"product_id": "java-1_8_0-openjdk-devel-1.8.0.181-3.10.1.s390x"
}
},
{
"category": "product_version",
"name": "java-1_8_0-openjdk-headless-1.8.0.181-3.10.1.s390x",
"product": {
"name": "java-1_8_0-openjdk-headless-1.8.0.181-3.10.1.s390x",
"product_id": "java-1_8_0-openjdk-headless-1.8.0.181-3.10.1.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "java-1_8_0-openjdk-1.8.0.181-3.10.1.x86_64",
"product": {
"name": "java-1_8_0-openjdk-1.8.0.181-3.10.1.x86_64",
"product_id": "java-1_8_0-openjdk-1.8.0.181-3.10.1.x86_64"
}
},
{
"category": "product_version",
"name": "java-1_8_0-openjdk-demo-1.8.0.181-3.10.1.x86_64",
"product": {
"name": "java-1_8_0-openjdk-demo-1.8.0.181-3.10.1.x86_64",
"product_id": "java-1_8_0-openjdk-demo-1.8.0.181-3.10.1.x86_64"
}
},
{
"category": "product_version",
"name": "java-1_8_0-openjdk-devel-1.8.0.181-3.10.1.x86_64",
"product": {
"name": "java-1_8_0-openjdk-devel-1.8.0.181-3.10.1.x86_64",
"product_id": "java-1_8_0-openjdk-devel-1.8.0.181-3.10.1.x86_64"
}
},
{
"category": "product_version",
"name": "java-1_8_0-openjdk-headless-1.8.0.181-3.10.1.x86_64",
"product": {
"name": "java-1_8_0-openjdk-headless-1.8.0.181-3.10.1.x86_64",
"product_id": "java-1_8_0-openjdk-headless-1.8.0.181-3.10.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux Enterprise Module for Legacy 15",
"product": {
"name": "SUSE Linux Enterprise Module for Legacy 15",
"product_id": "SUSE Linux Enterprise Module for Legacy 15",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle-module-legacy:15"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-1.8.0.181-3.10.1.aarch64 as component of SUSE Linux Enterprise Module for Legacy 15",
"product_id": "SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.181-3.10.1.aarch64"
},
"product_reference": "java-1_8_0-openjdk-1.8.0.181-3.10.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Legacy 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-1.8.0.181-3.10.1.ppc64le as component of SUSE Linux Enterprise Module for Legacy 15",
"product_id": "SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.181-3.10.1.ppc64le"
},
"product_reference": "java-1_8_0-openjdk-1.8.0.181-3.10.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Legacy 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-1.8.0.181-3.10.1.s390x as component of SUSE Linux Enterprise Module for Legacy 15",
"product_id": "SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.181-3.10.1.s390x"
},
"product_reference": "java-1_8_0-openjdk-1.8.0.181-3.10.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Legacy 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-1.8.0.181-3.10.1.x86_64 as component of SUSE Linux Enterprise Module for Legacy 15",
"product_id": "SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.181-3.10.1.x86_64"
},
"product_reference": "java-1_8_0-openjdk-1.8.0.181-3.10.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Legacy 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-demo-1.8.0.181-3.10.1.aarch64 as component of SUSE Linux Enterprise Module for Legacy 15",
"product_id": "SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.181-3.10.1.aarch64"
},
"product_reference": "java-1_8_0-openjdk-demo-1.8.0.181-3.10.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Legacy 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-demo-1.8.0.181-3.10.1.ppc64le as component of SUSE Linux Enterprise Module for Legacy 15",
"product_id": "SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.181-3.10.1.ppc64le"
},
"product_reference": "java-1_8_0-openjdk-demo-1.8.0.181-3.10.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Legacy 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-demo-1.8.0.181-3.10.1.s390x as component of SUSE Linux Enterprise Module for Legacy 15",
"product_id": "SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.181-3.10.1.s390x"
},
"product_reference": "java-1_8_0-openjdk-demo-1.8.0.181-3.10.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Legacy 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-demo-1.8.0.181-3.10.1.x86_64 as component of SUSE Linux Enterprise Module for Legacy 15",
"product_id": "SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.181-3.10.1.x86_64"
},
"product_reference": "java-1_8_0-openjdk-demo-1.8.0.181-3.10.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Legacy 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-devel-1.8.0.181-3.10.1.aarch64 as component of SUSE Linux Enterprise Module for Legacy 15",
"product_id": "SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.181-3.10.1.aarch64"
},
"product_reference": "java-1_8_0-openjdk-devel-1.8.0.181-3.10.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Legacy 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-devel-1.8.0.181-3.10.1.ppc64le as component of SUSE Linux Enterprise Module for Legacy 15",
"product_id": "SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.181-3.10.1.ppc64le"
},
"product_reference": "java-1_8_0-openjdk-devel-1.8.0.181-3.10.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Legacy 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-devel-1.8.0.181-3.10.1.s390x as component of SUSE Linux Enterprise Module for Legacy 15",
"product_id": "SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.181-3.10.1.s390x"
},
"product_reference": "java-1_8_0-openjdk-devel-1.8.0.181-3.10.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Legacy 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-devel-1.8.0.181-3.10.1.x86_64 as component of SUSE Linux Enterprise Module for Legacy 15",
"product_id": "SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.181-3.10.1.x86_64"
},
"product_reference": "java-1_8_0-openjdk-devel-1.8.0.181-3.10.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Legacy 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-headless-1.8.0.181-3.10.1.aarch64 as component of SUSE Linux Enterprise Module for Legacy 15",
"product_id": "SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.181-3.10.1.aarch64"
},
"product_reference": "java-1_8_0-openjdk-headless-1.8.0.181-3.10.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Legacy 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-headless-1.8.0.181-3.10.1.ppc64le as component of SUSE Linux Enterprise Module for Legacy 15",
"product_id": "SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.181-3.10.1.ppc64le"
},
"product_reference": "java-1_8_0-openjdk-headless-1.8.0.181-3.10.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Legacy 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-headless-1.8.0.181-3.10.1.s390x as component of SUSE Linux Enterprise Module for Legacy 15",
"product_id": "SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.181-3.10.1.s390x"
},
"product_reference": "java-1_8_0-openjdk-headless-1.8.0.181-3.10.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Legacy 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-headless-1.8.0.181-3.10.1.x86_64 as component of SUSE Linux Enterprise Module for Legacy 15",
"product_id": "SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.181-3.10.1.x86_64"
},
"product_reference": "java-1_8_0-openjdk-headless-1.8.0.181-3.10.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Legacy 15"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2018-2938",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-2938"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Java DB). Supported versions that are affected are Java SE: 6u191, 7u181 and 8u172. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. While the vulnerability is in Java SE, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVE-2018-2938 addresses CVE-2018-1313. CVSS 3.0 Base Score 9.0 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.181-3.10.1.aarch64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.181-3.10.1.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.181-3.10.1.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.181-3.10.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.181-3.10.1.aarch64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.181-3.10.1.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.181-3.10.1.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.181-3.10.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.181-3.10.1.aarch64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.181-3.10.1.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.181-3.10.1.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.181-3.10.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.181-3.10.1.aarch64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.181-3.10.1.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.181-3.10.1.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.181-3.10.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-2938",
"url": "https://www.suse.com/security/cve/CVE-2018-2938"
},
{
"category": "external",
"summary": "SUSE Bug 1101644 for CVE-2018-2938",
"url": "https://bugzilla.suse.com/1101644"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.181-3.10.1.aarch64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.181-3.10.1.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.181-3.10.1.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.181-3.10.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.181-3.10.1.aarch64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.181-3.10.1.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.181-3.10.1.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.181-3.10.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.181-3.10.1.aarch64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.181-3.10.1.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.181-3.10.1.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.181-3.10.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.181-3.10.1.aarch64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.181-3.10.1.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.181-3.10.1.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.181-3.10.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.181-3.10.1.aarch64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.181-3.10.1.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.181-3.10.1.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.181-3.10.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.181-3.10.1.aarch64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.181-3.10.1.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.181-3.10.1.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.181-3.10.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.181-3.10.1.aarch64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.181-3.10.1.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.181-3.10.1.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.181-3.10.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.181-3.10.1.aarch64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.181-3.10.1.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.181-3.10.1.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.181-3.10.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-10-05T13:22:42Z",
"details": "important"
}
],
"title": "CVE-2018-2938"
},
{
"cve": "CVE-2018-2940",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-2940"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries). Supported versions that are affected are Java SE: 6u191, 7u181, 8u172 and 10.0.1; Java SE Embedded: 8u171. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 4.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.181-3.10.1.aarch64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.181-3.10.1.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.181-3.10.1.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.181-3.10.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.181-3.10.1.aarch64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.181-3.10.1.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.181-3.10.1.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.181-3.10.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.181-3.10.1.aarch64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.181-3.10.1.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.181-3.10.1.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.181-3.10.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.181-3.10.1.aarch64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.181-3.10.1.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.181-3.10.1.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.181-3.10.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-2940",
"url": "https://www.suse.com/security/cve/CVE-2018-2940"
},
{
"category": "external",
"summary": "SUSE Bug 1101645 for CVE-2018-2940",
"url": "https://bugzilla.suse.com/1101645"
},
{
"category": "external",
"summary": "SUSE Bug 1101656 for CVE-2018-2940",
"url": "https://bugzilla.suse.com/1101656"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.181-3.10.1.aarch64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.181-3.10.1.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.181-3.10.1.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.181-3.10.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.181-3.10.1.aarch64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.181-3.10.1.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.181-3.10.1.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.181-3.10.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.181-3.10.1.aarch64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.181-3.10.1.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.181-3.10.1.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.181-3.10.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.181-3.10.1.aarch64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.181-3.10.1.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.181-3.10.1.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.181-3.10.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.181-3.10.1.aarch64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.181-3.10.1.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.181-3.10.1.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.181-3.10.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.181-3.10.1.aarch64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.181-3.10.1.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.181-3.10.1.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.181-3.10.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.181-3.10.1.aarch64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.181-3.10.1.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.181-3.10.1.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.181-3.10.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.181-3.10.1.aarch64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.181-3.10.1.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.181-3.10.1.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.181-3.10.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-10-05T13:22:42Z",
"details": "moderate"
}
],
"title": "CVE-2018-2940"
},
{
"cve": "CVE-2018-2952",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-2952"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Concurrency). Supported versions that are affected are Java SE: 6u191, 7u181, 8u172 and 10.0.1; Java SE Embedded: 8u171; JRockit: R28.3.18. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 3.7 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.181-3.10.1.aarch64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.181-3.10.1.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.181-3.10.1.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.181-3.10.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.181-3.10.1.aarch64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.181-3.10.1.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.181-3.10.1.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.181-3.10.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.181-3.10.1.aarch64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.181-3.10.1.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.181-3.10.1.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.181-3.10.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.181-3.10.1.aarch64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.181-3.10.1.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.181-3.10.1.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.181-3.10.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-2952",
"url": "https://www.suse.com/security/cve/CVE-2018-2952"
},
{
"category": "external",
"summary": "SUSE Bug 1101645 for CVE-2018-2952",
"url": "https://bugzilla.suse.com/1101645"
},
{
"category": "external",
"summary": "SUSE Bug 1101651 for CVE-2018-2952",
"url": "https://bugzilla.suse.com/1101651"
},
{
"category": "external",
"summary": "SUSE Bug 1101656 for CVE-2018-2952",
"url": "https://bugzilla.suse.com/1101656"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.181-3.10.1.aarch64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.181-3.10.1.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.181-3.10.1.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.181-3.10.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.181-3.10.1.aarch64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.181-3.10.1.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.181-3.10.1.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.181-3.10.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.181-3.10.1.aarch64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.181-3.10.1.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.181-3.10.1.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.181-3.10.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.181-3.10.1.aarch64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.181-3.10.1.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.181-3.10.1.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.181-3.10.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.181-3.10.1.aarch64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.181-3.10.1.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.181-3.10.1.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.181-3.10.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.181-3.10.1.aarch64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.181-3.10.1.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.181-3.10.1.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.181-3.10.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.181-3.10.1.aarch64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.181-3.10.1.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.181-3.10.1.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.181-3.10.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.181-3.10.1.aarch64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.181-3.10.1.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.181-3.10.1.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.181-3.10.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-10-05T13:22:42Z",
"details": "important"
}
],
"title": "CVE-2018-2952"
},
{
"cve": "CVE-2018-2973",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-2973"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: JSSE). Supported versions that are affected are Java SE: 6u191, 7u181, 8u172 and 10.0.1; Java SE Embedded: 8u171. Difficult to exploit vulnerability allows unauthenticated attacker with network access via SSL/TLS to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 5.9 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.181-3.10.1.aarch64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.181-3.10.1.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.181-3.10.1.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.181-3.10.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.181-3.10.1.aarch64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.181-3.10.1.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.181-3.10.1.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.181-3.10.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.181-3.10.1.aarch64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.181-3.10.1.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.181-3.10.1.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.181-3.10.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.181-3.10.1.aarch64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.181-3.10.1.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.181-3.10.1.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.181-3.10.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-2973",
"url": "https://www.suse.com/security/cve/CVE-2018-2973"
},
{
"category": "external",
"summary": "SUSE Bug 1101645 for CVE-2018-2973",
"url": "https://bugzilla.suse.com/1101645"
},
{
"category": "external",
"summary": "SUSE Bug 1101656 for CVE-2018-2973",
"url": "https://bugzilla.suse.com/1101656"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.181-3.10.1.aarch64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.181-3.10.1.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.181-3.10.1.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.181-3.10.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.181-3.10.1.aarch64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.181-3.10.1.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.181-3.10.1.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.181-3.10.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.181-3.10.1.aarch64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.181-3.10.1.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.181-3.10.1.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.181-3.10.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.181-3.10.1.aarch64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.181-3.10.1.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.181-3.10.1.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.181-3.10.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.181-3.10.1.aarch64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.181-3.10.1.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.181-3.10.1.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.181-3.10.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.181-3.10.1.aarch64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.181-3.10.1.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.181-3.10.1.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.181-3.10.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.181-3.10.1.aarch64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.181-3.10.1.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.181-3.10.1.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.181-3.10.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.181-3.10.1.aarch64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.181-3.10.1.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.181-3.10.1.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.181-3.10.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-10-05T13:22:42Z",
"details": "moderate"
}
],
"title": "CVE-2018-2973"
}
]
}
suse-su-2018:2574-1
Vulnerability from csaf_suse
Published
2018-08-31 12:09
Modified
2018-08-31 12:09
Summary
Security update for java-1_7_0-ibm
Notes
Title of the patch
Security update for java-1_7_0-ibm
Description of the patch
This update for java-1_7_0-ibm fixes the following issues:
Security issues fixed:
- CVE-2018-1517: Fixed a flaw in the java.math component in IBM SDK, which may
allow an attacker to inflict a denial-of-service attack with specially
crafted String data.
- CVE-2018-1656: Protect against path traversal attacks when extracting
compressed dump files.
- CVE-2018-2940: Fixed an easily exploitable vulnerability in the libraries
subcomponent, which allowed unauthenticated attackers with network access
via multiple protocols to compromise the Java SE, leading to
unauthorized read access.
- CVE-2018-2952: Fixed an easily exploitable vulnerability in the concurrency
subcomponent, which allowed unauthenticated attackers with network access
via multiple protocols to compromise the Java SE, leading to denial of
service.
- CVE-2018-2973: Fixed a difficult to exploit vulnerability in the JSSE
subcomponent, which allowed unauthenticated attackers with network access
via SSL/TLS to compromise the Java SE, leading to unauthorized creation,
deletion or modification access to critical data.
- CVE-2018-12539: Fixed a vulnerability in which users other than the process
owner may be able to use Java Attach API to connect to the IBM JVM on the
same machine and use Attach API operations, including the ability to execute
untrusted arbitrary code.
Other changes made:
- Various JIT/JVM crash fixes
- Version update to 7.1.4.30 (bsc#1104668)
You can find detailed information about this update [here](https://developer.ibm.com/javasdk/support/security-vulnerabilities/#IBM_Security_Update_August_2018).
Patchnames
sleposp3-java-1_7_0-ibm-13765,slessp3-java-1_7_0-ibm-13765
Terms of use
CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for java-1_7_0-ibm",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This update for java-1_7_0-ibm fixes the following issues:\n\nSecurity issues fixed:\n \n- CVE-2018-1517: Fixed a flaw in the java.math component in IBM SDK, which may\n allow an attacker to inflict a denial-of-service attack with specially\n crafted String data.\n- CVE-2018-1656: Protect against path traversal attacks when extracting\n compressed dump files.\n- CVE-2018-2940: Fixed an easily exploitable vulnerability in the libraries\n subcomponent, which allowed unauthenticated attackers with network access\n via multiple protocols to compromise the Java SE, leading to\n unauthorized read access.\n- CVE-2018-2952: Fixed an easily exploitable vulnerability in the concurrency\n subcomponent, which allowed unauthenticated attackers with network access\n via multiple protocols to compromise the Java SE, leading to denial of\n service.\n- CVE-2018-2973: Fixed a difficult to exploit vulnerability in the JSSE\n subcomponent, which allowed unauthenticated attackers with network access\n via SSL/TLS to compromise the Java SE, leading to unauthorized creation,\n deletion or modification access to critical data.\n- CVE-2018-12539: Fixed a vulnerability in which users other than the process\n owner may be able to use Java Attach API to connect to the IBM JVM on the\n same machine and use Attach API operations, including the ability to execute\n untrusted arbitrary code.\n\nOther changes made:\n\n- Various JIT/JVM crash fixes\n- Version update to 7.1.4.30 (bsc#1104668)\n\nYou can find detailed information about this update [here](https://developer.ibm.com/javasdk/support/security-vulnerabilities/#IBM_Security_Update_August_2018).\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "sleposp3-java-1_7_0-ibm-13765,slessp3-java-1_7_0-ibm-13765",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2018_2574-1.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2018:2574-1",
"url": "https://www.suse.com/support/update/announcement/2018/suse-su-20182574-1/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2018:2574-1",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2018-August/004521.html"
},
{
"category": "self",
"summary": "SUSE Bug 1104668",
"url": "https://bugzilla.suse.com/1104668"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-12539 page",
"url": "https://www.suse.com/security/cve/CVE-2018-12539/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-1517 page",
"url": "https://www.suse.com/security/cve/CVE-2018-1517/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-1656 page",
"url": "https://www.suse.com/security/cve/CVE-2018-1656/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-2940 page",
"url": "https://www.suse.com/security/cve/CVE-2018-2940/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-2952 page",
"url": "https://www.suse.com/security/cve/CVE-2018-2952/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-2973 page",
"url": "https://www.suse.com/security/cve/CVE-2018-2973/"
}
],
"title": "Security update for java-1_7_0-ibm",
"tracking": {
"current_release_date": "2018-08-31T12:09:30Z",
"generator": {
"date": "2018-08-31T12:09:30Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2018:2574-1",
"initial_release_date": "2018-08-31T12:09:30Z",
"revision_history": [
{
"date": "2018-08-31T12:09:30Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "java-1_7_0-ibm-1.7.0_sr10.30-65.28.1.i586",
"product": {
"name": "java-1_7_0-ibm-1.7.0_sr10.30-65.28.1.i586",
"product_id": "java-1_7_0-ibm-1.7.0_sr10.30-65.28.1.i586"
}
},
{
"category": "product_version",
"name": "java-1_7_0-ibm-alsa-1.7.0_sr10.30-65.28.1.i586",
"product": {
"name": "java-1_7_0-ibm-alsa-1.7.0_sr10.30-65.28.1.i586",
"product_id": "java-1_7_0-ibm-alsa-1.7.0_sr10.30-65.28.1.i586"
}
},
{
"category": "product_version",
"name": "java-1_7_0-ibm-devel-1.7.0_sr10.30-65.28.1.i586",
"product": {
"name": "java-1_7_0-ibm-devel-1.7.0_sr10.30-65.28.1.i586",
"product_id": "java-1_7_0-ibm-devel-1.7.0_sr10.30-65.28.1.i586"
}
},
{
"category": "product_version",
"name": "java-1_7_0-ibm-jdbc-1.7.0_sr10.30-65.28.1.i586",
"product": {
"name": "java-1_7_0-ibm-jdbc-1.7.0_sr10.30-65.28.1.i586",
"product_id": "java-1_7_0-ibm-jdbc-1.7.0_sr10.30-65.28.1.i586"
}
},
{
"category": "product_version",
"name": "java-1_7_0-ibm-plugin-1.7.0_sr10.30-65.28.1.i586",
"product": {
"name": "java-1_7_0-ibm-plugin-1.7.0_sr10.30-65.28.1.i586",
"product_id": "java-1_7_0-ibm-plugin-1.7.0_sr10.30-65.28.1.i586"
}
}
],
"category": "architecture",
"name": "i586"
},
{
"branches": [
{
"category": "product_version",
"name": "java-1_7_0-ibm-1.7.0_sr10.30-65.28.1.s390x",
"product": {
"name": "java-1_7_0-ibm-1.7.0_sr10.30-65.28.1.s390x",
"product_id": "java-1_7_0-ibm-1.7.0_sr10.30-65.28.1.s390x"
}
},
{
"category": "product_version",
"name": "java-1_7_0-ibm-devel-1.7.0_sr10.30-65.28.1.s390x",
"product": {
"name": "java-1_7_0-ibm-devel-1.7.0_sr10.30-65.28.1.s390x",
"product_id": "java-1_7_0-ibm-devel-1.7.0_sr10.30-65.28.1.s390x"
}
},
{
"category": "product_version",
"name": "java-1_7_0-ibm-jdbc-1.7.0_sr10.30-65.28.1.s390x",
"product": {
"name": "java-1_7_0-ibm-jdbc-1.7.0_sr10.30-65.28.1.s390x",
"product_id": "java-1_7_0-ibm-jdbc-1.7.0_sr10.30-65.28.1.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "java-1_7_0-ibm-1.7.0_sr10.30-65.28.1.x86_64",
"product": {
"name": "java-1_7_0-ibm-1.7.0_sr10.30-65.28.1.x86_64",
"product_id": "java-1_7_0-ibm-1.7.0_sr10.30-65.28.1.x86_64"
}
},
{
"category": "product_version",
"name": "java-1_7_0-ibm-alsa-1.7.0_sr10.30-65.28.1.x86_64",
"product": {
"name": "java-1_7_0-ibm-alsa-1.7.0_sr10.30-65.28.1.x86_64",
"product_id": "java-1_7_0-ibm-alsa-1.7.0_sr10.30-65.28.1.x86_64"
}
},
{
"category": "product_version",
"name": "java-1_7_0-ibm-devel-1.7.0_sr10.30-65.28.1.x86_64",
"product": {
"name": "java-1_7_0-ibm-devel-1.7.0_sr10.30-65.28.1.x86_64",
"product_id": "java-1_7_0-ibm-devel-1.7.0_sr10.30-65.28.1.x86_64"
}
},
{
"category": "product_version",
"name": "java-1_7_0-ibm-jdbc-1.7.0_sr10.30-65.28.1.x86_64",
"product": {
"name": "java-1_7_0-ibm-jdbc-1.7.0_sr10.30-65.28.1.x86_64",
"product_id": "java-1_7_0-ibm-jdbc-1.7.0_sr10.30-65.28.1.x86_64"
}
},
{
"category": "product_version",
"name": "java-1_7_0-ibm-plugin-1.7.0_sr10.30-65.28.1.x86_64",
"product": {
"name": "java-1_7_0-ibm-plugin-1.7.0_sr10.30-65.28.1.x86_64",
"product_id": "java-1_7_0-ibm-plugin-1.7.0_sr10.30-65.28.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux Enterprise Point of Sale 11 SP3",
"product": {
"name": "SUSE Linux Enterprise Point of Sale 11 SP3",
"product_id": "SUSE Linux Enterprise Point of Sale 11 SP3",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle-pos:11:sp3"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 11 SP3-LTSS",
"product": {
"name": "SUSE Linux Enterprise Server 11 SP3-LTSS",
"product_id": "SUSE Linux Enterprise Server 11 SP3-LTSS",
"product_identification_helper": {
"cpe": "cpe:/o:suse:suse_sles_ltss:11:sp3"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 11 SP3-TERADATA",
"product": {
"name": "SUSE Linux Enterprise Server 11 SP3-TERADATA",
"product_id": "SUSE Linux Enterprise Server 11 SP3-TERADATA",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles:11:sp3:teradata"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-ibm-1.7.0_sr10.30-65.28.1.i586 as component of SUSE Linux Enterprise Point of Sale 11 SP3",
"product_id": "SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-1.7.0_sr10.30-65.28.1.i586"
},
"product_reference": "java-1_7_0-ibm-1.7.0_sr10.30-65.28.1.i586",
"relates_to_product_reference": "SUSE Linux Enterprise Point of Sale 11 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-ibm-alsa-1.7.0_sr10.30-65.28.1.i586 as component of SUSE Linux Enterprise Point of Sale 11 SP3",
"product_id": "SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-alsa-1.7.0_sr10.30-65.28.1.i586"
},
"product_reference": "java-1_7_0-ibm-alsa-1.7.0_sr10.30-65.28.1.i586",
"relates_to_product_reference": "SUSE Linux Enterprise Point of Sale 11 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-ibm-devel-1.7.0_sr10.30-65.28.1.i586 as component of SUSE Linux Enterprise Point of Sale 11 SP3",
"product_id": "SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-devel-1.7.0_sr10.30-65.28.1.i586"
},
"product_reference": "java-1_7_0-ibm-devel-1.7.0_sr10.30-65.28.1.i586",
"relates_to_product_reference": "SUSE Linux Enterprise Point of Sale 11 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-ibm-jdbc-1.7.0_sr10.30-65.28.1.i586 as component of SUSE Linux Enterprise Point of Sale 11 SP3",
"product_id": "SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-jdbc-1.7.0_sr10.30-65.28.1.i586"
},
"product_reference": "java-1_7_0-ibm-jdbc-1.7.0_sr10.30-65.28.1.i586",
"relates_to_product_reference": "SUSE Linux Enterprise Point of Sale 11 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-ibm-plugin-1.7.0_sr10.30-65.28.1.i586 as component of SUSE Linux Enterprise Point of Sale 11 SP3",
"product_id": "SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-plugin-1.7.0_sr10.30-65.28.1.i586"
},
"product_reference": "java-1_7_0-ibm-plugin-1.7.0_sr10.30-65.28.1.i586",
"relates_to_product_reference": "SUSE Linux Enterprise Point of Sale 11 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-ibm-1.7.0_sr10.30-65.28.1.i586 as component of SUSE Linux Enterprise Server 11 SP3-LTSS",
"product_id": "SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.30-65.28.1.i586"
},
"product_reference": "java-1_7_0-ibm-1.7.0_sr10.30-65.28.1.i586",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-ibm-1.7.0_sr10.30-65.28.1.s390x as component of SUSE Linux Enterprise Server 11 SP3-LTSS",
"product_id": "SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.30-65.28.1.s390x"
},
"product_reference": "java-1_7_0-ibm-1.7.0_sr10.30-65.28.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-ibm-1.7.0_sr10.30-65.28.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP3-LTSS",
"product_id": "SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.30-65.28.1.x86_64"
},
"product_reference": "java-1_7_0-ibm-1.7.0_sr10.30-65.28.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-ibm-alsa-1.7.0_sr10.30-65.28.1.i586 as component of SUSE Linux Enterprise Server 11 SP3-LTSS",
"product_id": "SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr10.30-65.28.1.i586"
},
"product_reference": "java-1_7_0-ibm-alsa-1.7.0_sr10.30-65.28.1.i586",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-ibm-alsa-1.7.0_sr10.30-65.28.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP3-LTSS",
"product_id": "SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr10.30-65.28.1.x86_64"
},
"product_reference": "java-1_7_0-ibm-alsa-1.7.0_sr10.30-65.28.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-ibm-devel-1.7.0_sr10.30-65.28.1.i586 as component of SUSE Linux Enterprise Server 11 SP3-LTSS",
"product_id": "SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.30-65.28.1.i586"
},
"product_reference": "java-1_7_0-ibm-devel-1.7.0_sr10.30-65.28.1.i586",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-ibm-devel-1.7.0_sr10.30-65.28.1.s390x as component of SUSE Linux Enterprise Server 11 SP3-LTSS",
"product_id": "SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.30-65.28.1.s390x"
},
"product_reference": "java-1_7_0-ibm-devel-1.7.0_sr10.30-65.28.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-ibm-devel-1.7.0_sr10.30-65.28.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP3-LTSS",
"product_id": "SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.30-65.28.1.x86_64"
},
"product_reference": "java-1_7_0-ibm-devel-1.7.0_sr10.30-65.28.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-ibm-jdbc-1.7.0_sr10.30-65.28.1.i586 as component of SUSE Linux Enterprise Server 11 SP3-LTSS",
"product_id": "SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.30-65.28.1.i586"
},
"product_reference": "java-1_7_0-ibm-jdbc-1.7.0_sr10.30-65.28.1.i586",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-ibm-jdbc-1.7.0_sr10.30-65.28.1.s390x as component of SUSE Linux Enterprise Server 11 SP3-LTSS",
"product_id": "SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.30-65.28.1.s390x"
},
"product_reference": "java-1_7_0-ibm-jdbc-1.7.0_sr10.30-65.28.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-ibm-jdbc-1.7.0_sr10.30-65.28.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP3-LTSS",
"product_id": "SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.30-65.28.1.x86_64"
},
"product_reference": "java-1_7_0-ibm-jdbc-1.7.0_sr10.30-65.28.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-ibm-plugin-1.7.0_sr10.30-65.28.1.i586 as component of SUSE Linux Enterprise Server 11 SP3-LTSS",
"product_id": "SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr10.30-65.28.1.i586"
},
"product_reference": "java-1_7_0-ibm-plugin-1.7.0_sr10.30-65.28.1.i586",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-ibm-plugin-1.7.0_sr10.30-65.28.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP3-LTSS",
"product_id": "SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr10.30-65.28.1.x86_64"
},
"product_reference": "java-1_7_0-ibm-plugin-1.7.0_sr10.30-65.28.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-ibm-1.7.0_sr10.30-65.28.1.i586 as component of SUSE Linux Enterprise Server 11 SP3-TERADATA",
"product_id": "SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.30-65.28.1.i586"
},
"product_reference": "java-1_7_0-ibm-1.7.0_sr10.30-65.28.1.i586",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-TERADATA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-ibm-1.7.0_sr10.30-65.28.1.s390x as component of SUSE Linux Enterprise Server 11 SP3-TERADATA",
"product_id": "SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.30-65.28.1.s390x"
},
"product_reference": "java-1_7_0-ibm-1.7.0_sr10.30-65.28.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-TERADATA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-ibm-1.7.0_sr10.30-65.28.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP3-TERADATA",
"product_id": "SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.30-65.28.1.x86_64"
},
"product_reference": "java-1_7_0-ibm-1.7.0_sr10.30-65.28.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-TERADATA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-ibm-alsa-1.7.0_sr10.30-65.28.1.i586 as component of SUSE Linux Enterprise Server 11 SP3-TERADATA",
"product_id": "SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-alsa-1.7.0_sr10.30-65.28.1.i586"
},
"product_reference": "java-1_7_0-ibm-alsa-1.7.0_sr10.30-65.28.1.i586",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-TERADATA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-ibm-alsa-1.7.0_sr10.30-65.28.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP3-TERADATA",
"product_id": "SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-alsa-1.7.0_sr10.30-65.28.1.x86_64"
},
"product_reference": "java-1_7_0-ibm-alsa-1.7.0_sr10.30-65.28.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-TERADATA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-ibm-devel-1.7.0_sr10.30-65.28.1.i586 as component of SUSE Linux Enterprise Server 11 SP3-TERADATA",
"product_id": "SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.30-65.28.1.i586"
},
"product_reference": "java-1_7_0-ibm-devel-1.7.0_sr10.30-65.28.1.i586",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-TERADATA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-ibm-devel-1.7.0_sr10.30-65.28.1.s390x as component of SUSE Linux Enterprise Server 11 SP3-TERADATA",
"product_id": "SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.30-65.28.1.s390x"
},
"product_reference": "java-1_7_0-ibm-devel-1.7.0_sr10.30-65.28.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-TERADATA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-ibm-devel-1.7.0_sr10.30-65.28.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP3-TERADATA",
"product_id": "SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.30-65.28.1.x86_64"
},
"product_reference": "java-1_7_0-ibm-devel-1.7.0_sr10.30-65.28.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-TERADATA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-ibm-jdbc-1.7.0_sr10.30-65.28.1.i586 as component of SUSE Linux Enterprise Server 11 SP3-TERADATA",
"product_id": "SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.30-65.28.1.i586"
},
"product_reference": "java-1_7_0-ibm-jdbc-1.7.0_sr10.30-65.28.1.i586",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-TERADATA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-ibm-jdbc-1.7.0_sr10.30-65.28.1.s390x as component of SUSE Linux Enterprise Server 11 SP3-TERADATA",
"product_id": "SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.30-65.28.1.s390x"
},
"product_reference": "java-1_7_0-ibm-jdbc-1.7.0_sr10.30-65.28.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-TERADATA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-ibm-jdbc-1.7.0_sr10.30-65.28.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP3-TERADATA",
"product_id": "SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.30-65.28.1.x86_64"
},
"product_reference": "java-1_7_0-ibm-jdbc-1.7.0_sr10.30-65.28.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-TERADATA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-ibm-plugin-1.7.0_sr10.30-65.28.1.i586 as component of SUSE Linux Enterprise Server 11 SP3-TERADATA",
"product_id": "SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-plugin-1.7.0_sr10.30-65.28.1.i586"
},
"product_reference": "java-1_7_0-ibm-plugin-1.7.0_sr10.30-65.28.1.i586",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-TERADATA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-ibm-plugin-1.7.0_sr10.30-65.28.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP3-TERADATA",
"product_id": "SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-plugin-1.7.0_sr10.30-65.28.1.x86_64"
},
"product_reference": "java-1_7_0-ibm-plugin-1.7.0_sr10.30-65.28.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-TERADATA"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2018-12539",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-12539"
}
],
"notes": [
{
"category": "general",
"text": "In Eclipse OpenJ9 version 0.8, users other than the process owner may be able to use Java Attach API to connect to an Eclipse OpenJ9 or IBM JVM on the same machine and use Attach API operations, which includes the ability to execute untrusted native code. Attach API is enabled by default on Windows, Linux and AIX JVMs and can be disabled using the command line option -Dcom.ibm.tools.attach.enable=no.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-alsa-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-devel-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-jdbc-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-plugin-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.30-65.28.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.30-65.28.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr10.30-65.28.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.30-65.28.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.30-65.28.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.30-65.28.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.30-65.28.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr10.30-65.28.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.30-65.28.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.30-65.28.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-alsa-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-alsa-1.7.0_sr10.30-65.28.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.30-65.28.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.30-65.28.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.30-65.28.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.30-65.28.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-plugin-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-plugin-1.7.0_sr10.30-65.28.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-12539",
"url": "https://www.suse.com/security/cve/CVE-2018-12539"
},
{
"category": "external",
"summary": "SUSE Bug 1101645 for CVE-2018-12539",
"url": "https://bugzilla.suse.com/1101645"
},
{
"category": "external",
"summary": "SUSE Bug 1101656 for CVE-2018-12539",
"url": "https://bugzilla.suse.com/1101656"
},
{
"category": "external",
"summary": "SUSE Bug 1104668 for CVE-2018-12539",
"url": "https://bugzilla.suse.com/1104668"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-alsa-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-devel-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-jdbc-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-plugin-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.30-65.28.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.30-65.28.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr10.30-65.28.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.30-65.28.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.30-65.28.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.30-65.28.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.30-65.28.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr10.30-65.28.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.30-65.28.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.30-65.28.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-alsa-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-alsa-1.7.0_sr10.30-65.28.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.30-65.28.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.30-65.28.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.30-65.28.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.30-65.28.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-plugin-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-plugin-1.7.0_sr10.30-65.28.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.4,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-alsa-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-devel-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-jdbc-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-plugin-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.30-65.28.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.30-65.28.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr10.30-65.28.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.30-65.28.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.30-65.28.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.30-65.28.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.30-65.28.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr10.30-65.28.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.30-65.28.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.30-65.28.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-alsa-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-alsa-1.7.0_sr10.30-65.28.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.30-65.28.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.30-65.28.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.30-65.28.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.30-65.28.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-plugin-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-plugin-1.7.0_sr10.30-65.28.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-08-31T12:09:30Z",
"details": "moderate"
}
],
"title": "CVE-2018-12539"
},
{
"cve": "CVE-2018-1517",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-1517"
}
],
"notes": [
{
"category": "general",
"text": "A flaw in the java.math component in IBM SDK, Java Technology Edition 6.0, 7.0, and 8.0 may allow an attacker to inflict a denial-of-service attack with specially crafted String data. IBM X-Force ID: 141681.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-alsa-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-devel-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-jdbc-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-plugin-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.30-65.28.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.30-65.28.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr10.30-65.28.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.30-65.28.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.30-65.28.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.30-65.28.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.30-65.28.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr10.30-65.28.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.30-65.28.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.30-65.28.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-alsa-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-alsa-1.7.0_sr10.30-65.28.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.30-65.28.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.30-65.28.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.30-65.28.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.30-65.28.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-plugin-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-plugin-1.7.0_sr10.30-65.28.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-1517",
"url": "https://www.suse.com/security/cve/CVE-2018-1517"
},
{
"category": "external",
"summary": "SUSE Bug 1101645 for CVE-2018-1517",
"url": "https://bugzilla.suse.com/1101645"
},
{
"category": "external",
"summary": "SUSE Bug 1101656 for CVE-2018-1517",
"url": "https://bugzilla.suse.com/1101656"
},
{
"category": "external",
"summary": "SUSE Bug 1104668 for CVE-2018-1517",
"url": "https://bugzilla.suse.com/1104668"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-alsa-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-devel-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-jdbc-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-plugin-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.30-65.28.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.30-65.28.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr10.30-65.28.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.30-65.28.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.30-65.28.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.30-65.28.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.30-65.28.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr10.30-65.28.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.30-65.28.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.30-65.28.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-alsa-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-alsa-1.7.0_sr10.30-65.28.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.30-65.28.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.30-65.28.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.30-65.28.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.30-65.28.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-plugin-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-plugin-1.7.0_sr10.30-65.28.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-alsa-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-devel-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-jdbc-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-plugin-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.30-65.28.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.30-65.28.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr10.30-65.28.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.30-65.28.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.30-65.28.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.30-65.28.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.30-65.28.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr10.30-65.28.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.30-65.28.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.30-65.28.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-alsa-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-alsa-1.7.0_sr10.30-65.28.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.30-65.28.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.30-65.28.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.30-65.28.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.30-65.28.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-plugin-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-plugin-1.7.0_sr10.30-65.28.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-08-31T12:09:30Z",
"details": "moderate"
}
],
"title": "CVE-2018-1517"
},
{
"cve": "CVE-2018-1656",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-1656"
}
],
"notes": [
{
"category": "general",
"text": "The IBM Java Runtime Environment\u0027s Diagnostic Tooling Framework for Java (DTFJ) (IBM SDK, Java Technology Edition 6.0 , 7.0, and 8.0) does not protect against path traversal attacks when extracting compressed dump files. IBM X-Force ID: 144882.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-alsa-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-devel-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-jdbc-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-plugin-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.30-65.28.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.30-65.28.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr10.30-65.28.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.30-65.28.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.30-65.28.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.30-65.28.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.30-65.28.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr10.30-65.28.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.30-65.28.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.30-65.28.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-alsa-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-alsa-1.7.0_sr10.30-65.28.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.30-65.28.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.30-65.28.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.30-65.28.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.30-65.28.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-plugin-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-plugin-1.7.0_sr10.30-65.28.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-1656",
"url": "https://www.suse.com/security/cve/CVE-2018-1656"
},
{
"category": "external",
"summary": "SUSE Bug 1101645 for CVE-2018-1656",
"url": "https://bugzilla.suse.com/1101645"
},
{
"category": "external",
"summary": "SUSE Bug 1101656 for CVE-2018-1656",
"url": "https://bugzilla.suse.com/1101656"
},
{
"category": "external",
"summary": "SUSE Bug 1104668 for CVE-2018-1656",
"url": "https://bugzilla.suse.com/1104668"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-alsa-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-devel-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-jdbc-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-plugin-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.30-65.28.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.30-65.28.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr10.30-65.28.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.30-65.28.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.30-65.28.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.30-65.28.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.30-65.28.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr10.30-65.28.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.30-65.28.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.30-65.28.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-alsa-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-alsa-1.7.0_sr10.30-65.28.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.30-65.28.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.30-65.28.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.30-65.28.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.30-65.28.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-plugin-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-plugin-1.7.0_sr10.30-65.28.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.4,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:N",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-alsa-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-devel-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-jdbc-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-plugin-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.30-65.28.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.30-65.28.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr10.30-65.28.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.30-65.28.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.30-65.28.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.30-65.28.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.30-65.28.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr10.30-65.28.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.30-65.28.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.30-65.28.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-alsa-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-alsa-1.7.0_sr10.30-65.28.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.30-65.28.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.30-65.28.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.30-65.28.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.30-65.28.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-plugin-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-plugin-1.7.0_sr10.30-65.28.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-08-31T12:09:30Z",
"details": "moderate"
}
],
"title": "CVE-2018-1656"
},
{
"cve": "CVE-2018-2940",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-2940"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries). Supported versions that are affected are Java SE: 6u191, 7u181, 8u172 and 10.0.1; Java SE Embedded: 8u171. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 4.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-alsa-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-devel-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-jdbc-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-plugin-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.30-65.28.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.30-65.28.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr10.30-65.28.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.30-65.28.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.30-65.28.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.30-65.28.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.30-65.28.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr10.30-65.28.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.30-65.28.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.30-65.28.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-alsa-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-alsa-1.7.0_sr10.30-65.28.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.30-65.28.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.30-65.28.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.30-65.28.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.30-65.28.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-plugin-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-plugin-1.7.0_sr10.30-65.28.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-2940",
"url": "https://www.suse.com/security/cve/CVE-2018-2940"
},
{
"category": "external",
"summary": "SUSE Bug 1101645 for CVE-2018-2940",
"url": "https://bugzilla.suse.com/1101645"
},
{
"category": "external",
"summary": "SUSE Bug 1101656 for CVE-2018-2940",
"url": "https://bugzilla.suse.com/1101656"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-alsa-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-devel-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-jdbc-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-plugin-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.30-65.28.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.30-65.28.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr10.30-65.28.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.30-65.28.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.30-65.28.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.30-65.28.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.30-65.28.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr10.30-65.28.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.30-65.28.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.30-65.28.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-alsa-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-alsa-1.7.0_sr10.30-65.28.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.30-65.28.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.30-65.28.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.30-65.28.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.30-65.28.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-plugin-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-plugin-1.7.0_sr10.30-65.28.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-alsa-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-devel-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-jdbc-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-plugin-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.30-65.28.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.30-65.28.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr10.30-65.28.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.30-65.28.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.30-65.28.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.30-65.28.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.30-65.28.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr10.30-65.28.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.30-65.28.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.30-65.28.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-alsa-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-alsa-1.7.0_sr10.30-65.28.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.30-65.28.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.30-65.28.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.30-65.28.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.30-65.28.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-plugin-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-plugin-1.7.0_sr10.30-65.28.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-08-31T12:09:30Z",
"details": "moderate"
}
],
"title": "CVE-2018-2940"
},
{
"cve": "CVE-2018-2952",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-2952"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Concurrency). Supported versions that are affected are Java SE: 6u191, 7u181, 8u172 and 10.0.1; Java SE Embedded: 8u171; JRockit: R28.3.18. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 3.7 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-alsa-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-devel-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-jdbc-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-plugin-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.30-65.28.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.30-65.28.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr10.30-65.28.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.30-65.28.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.30-65.28.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.30-65.28.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.30-65.28.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr10.30-65.28.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.30-65.28.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.30-65.28.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-alsa-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-alsa-1.7.0_sr10.30-65.28.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.30-65.28.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.30-65.28.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.30-65.28.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.30-65.28.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-plugin-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-plugin-1.7.0_sr10.30-65.28.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-2952",
"url": "https://www.suse.com/security/cve/CVE-2018-2952"
},
{
"category": "external",
"summary": "SUSE Bug 1101645 for CVE-2018-2952",
"url": "https://bugzilla.suse.com/1101645"
},
{
"category": "external",
"summary": "SUSE Bug 1101651 for CVE-2018-2952",
"url": "https://bugzilla.suse.com/1101651"
},
{
"category": "external",
"summary": "SUSE Bug 1101656 for CVE-2018-2952",
"url": "https://bugzilla.suse.com/1101656"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-alsa-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-devel-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-jdbc-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-plugin-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.30-65.28.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.30-65.28.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr10.30-65.28.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.30-65.28.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.30-65.28.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.30-65.28.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.30-65.28.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr10.30-65.28.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.30-65.28.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.30-65.28.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-alsa-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-alsa-1.7.0_sr10.30-65.28.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.30-65.28.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.30-65.28.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.30-65.28.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.30-65.28.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-plugin-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-plugin-1.7.0_sr10.30-65.28.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-alsa-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-devel-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-jdbc-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-plugin-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.30-65.28.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.30-65.28.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr10.30-65.28.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.30-65.28.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.30-65.28.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.30-65.28.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.30-65.28.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr10.30-65.28.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.30-65.28.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.30-65.28.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-alsa-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-alsa-1.7.0_sr10.30-65.28.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.30-65.28.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.30-65.28.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.30-65.28.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.30-65.28.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-plugin-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-plugin-1.7.0_sr10.30-65.28.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-08-31T12:09:30Z",
"details": "important"
}
],
"title": "CVE-2018-2952"
},
{
"cve": "CVE-2018-2973",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-2973"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: JSSE). Supported versions that are affected are Java SE: 6u191, 7u181, 8u172 and 10.0.1; Java SE Embedded: 8u171. Difficult to exploit vulnerability allows unauthenticated attacker with network access via SSL/TLS to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 5.9 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-alsa-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-devel-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-jdbc-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-plugin-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.30-65.28.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.30-65.28.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr10.30-65.28.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.30-65.28.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.30-65.28.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.30-65.28.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.30-65.28.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr10.30-65.28.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.30-65.28.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.30-65.28.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-alsa-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-alsa-1.7.0_sr10.30-65.28.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.30-65.28.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.30-65.28.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.30-65.28.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.30-65.28.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-plugin-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-plugin-1.7.0_sr10.30-65.28.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-2973",
"url": "https://www.suse.com/security/cve/CVE-2018-2973"
},
{
"category": "external",
"summary": "SUSE Bug 1101645 for CVE-2018-2973",
"url": "https://bugzilla.suse.com/1101645"
},
{
"category": "external",
"summary": "SUSE Bug 1101656 for CVE-2018-2973",
"url": "https://bugzilla.suse.com/1101656"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-alsa-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-devel-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-jdbc-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-plugin-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.30-65.28.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.30-65.28.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr10.30-65.28.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.30-65.28.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.30-65.28.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.30-65.28.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.30-65.28.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr10.30-65.28.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.30-65.28.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.30-65.28.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-alsa-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-alsa-1.7.0_sr10.30-65.28.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.30-65.28.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.30-65.28.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.30-65.28.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.30-65.28.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-plugin-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-plugin-1.7.0_sr10.30-65.28.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-alsa-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-devel-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-jdbc-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-plugin-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.30-65.28.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.30-65.28.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr10.30-65.28.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.30-65.28.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.30-65.28.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.30-65.28.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.30-65.28.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr10.30-65.28.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.30-65.28.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.30-65.28.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-alsa-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-alsa-1.7.0_sr10.30-65.28.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.30-65.28.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.30-65.28.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.30-65.28.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.30-65.28.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-plugin-1.7.0_sr10.30-65.28.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-plugin-1.7.0_sr10.30-65.28.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-08-31T12:09:30Z",
"details": "moderate"
}
],
"title": "CVE-2018-2973"
}
]
}
suse-su-2018:2583-1
Vulnerability from csaf_suse
Published
2018-08-31 13:18
Modified
2018-08-31 13:18
Summary
Security update for java-1_7_1-ibm
Notes
Title of the patch
Security update for java-1_7_1-ibm
Description of the patch
This update for java-1_7_1-ibm to version 7.1.4.30 fixes the following issues:
Security issues fixed:
- CVE-2018-1517: Fixed a flaw in the java.math component in IBM SDK, which may
allow an attacker to inflict a denial-of-service attack with specially
crafted String data.
- CVE-2018-1656: Protect against path traversal attacks when extracting
compressed dump files.
- CVE-2018-2940: Fixed an easily exploitable vulnerability in the libraries
subcomponent, which allowed unauthenticated attackers with network access
via multiple protocols to compromise the Java SE, leading to
unauthorized read access.
- CVE-2018-2952: Fixed an easily exploitable vulnerability in the concurrency
subcomponent, which allowed unauthenticated attackers with network access
via multiple protocols to compromise the Java SE, leading to denial of
service.
- CVE-2018-2973: Fixed a difficult to exploit vulnerability in the JSSE
subcomponent, which allowed unauthenticated attackers with network access
via SSL/TLS to compromise the Java SE, leading to unauthorized creation,
deletion or modification access to critical data.
- CVE-2018-12539: Fixed a vulnerability in which users other than the process
owner may be able to use Java Attach API to connect to the IBM JVM on the
same machine and use Attach API operations, including the ability to execute
untrusted arbitrary code.
Other changes made:
- Various JIT/JVM crash fixes
- Version update to 7.1.4.30 (bsc#1104668)
You can find detailed information about this update [here](https://developer.ibm.com/javasdk/support/security-vulnerabilities/#IBM_Security_Update_August_2018).
Patchnames
sdksp4-java-1_7_1-ibm-13766,slessp4-java-1_7_1-ibm-13766
Terms of use
CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for java-1_7_1-ibm",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This update for java-1_7_1-ibm to version 7.1.4.30 fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2018-1517: Fixed a flaw in the java.math component in IBM SDK, which may\n allow an attacker to inflict a denial-of-service attack with specially\n crafted String data.\n- CVE-2018-1656: Protect against path traversal attacks when extracting\n compressed dump files.\n- CVE-2018-2940: Fixed an easily exploitable vulnerability in the libraries\n subcomponent, which allowed unauthenticated attackers with network access\n via multiple protocols to compromise the Java SE, leading to\n unauthorized read access.\n- CVE-2018-2952: Fixed an easily exploitable vulnerability in the concurrency\n subcomponent, which allowed unauthenticated attackers with network access\n via multiple protocols to compromise the Java SE, leading to denial of\n service.\n- CVE-2018-2973: Fixed a difficult to exploit vulnerability in the JSSE\n subcomponent, which allowed unauthenticated attackers with network access\n via SSL/TLS to compromise the Java SE, leading to unauthorized creation,\n deletion or modification access to critical data.\n- CVE-2018-12539: Fixed a vulnerability in which users other than the process\n owner may be able to use Java Attach API to connect to the IBM JVM on the\n same machine and use Attach API operations, including the ability to execute\n untrusted arbitrary code.\n\nOther changes made:\n\n- Various JIT/JVM crash fixes\n- Version update to 7.1.4.30 (bsc#1104668)\n\nYou can find detailed information about this update [here](https://developer.ibm.com/javasdk/support/security-vulnerabilities/#IBM_Security_Update_August_2018).\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "sdksp4-java-1_7_1-ibm-13766,slessp4-java-1_7_1-ibm-13766",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2018_2583-1.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2018:2583-1",
"url": "https://www.suse.com/support/update/announcement/2018/suse-su-20182583-1/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2018:2583-1",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2018-August/004524.html"
},
{
"category": "self",
"summary": "SUSE Bug 1104668",
"url": "https://bugzilla.suse.com/1104668"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-12539 page",
"url": "https://www.suse.com/security/cve/CVE-2018-12539/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-1517 page",
"url": "https://www.suse.com/security/cve/CVE-2018-1517/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-1656 page",
"url": "https://www.suse.com/security/cve/CVE-2018-1656/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-2940 page",
"url": "https://www.suse.com/security/cve/CVE-2018-2940/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-2952 page",
"url": "https://www.suse.com/security/cve/CVE-2018-2952/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-2973 page",
"url": "https://www.suse.com/security/cve/CVE-2018-2973/"
}
],
"title": "Security update for java-1_7_1-ibm",
"tracking": {
"current_release_date": "2018-08-31T13:18:32Z",
"generator": {
"date": "2018-08-31T13:18:32Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2018:2583-1",
"initial_release_date": "2018-08-31T13:18:32Z",
"revision_history": [
{
"date": "2018-08-31T13:18:32Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "java-1_7_1-ibm-devel-1.7.1_sr4.30-26.29.1.i586",
"product": {
"name": "java-1_7_1-ibm-devel-1.7.1_sr4.30-26.29.1.i586",
"product_id": "java-1_7_1-ibm-devel-1.7.1_sr4.30-26.29.1.i586"
}
},
{
"category": "product_version",
"name": "java-1_7_1-ibm-1.7.1_sr4.30-26.29.1.i586",
"product": {
"name": "java-1_7_1-ibm-1.7.1_sr4.30-26.29.1.i586",
"product_id": "java-1_7_1-ibm-1.7.1_sr4.30-26.29.1.i586"
}
},
{
"category": "product_version",
"name": "java-1_7_1-ibm-alsa-1.7.1_sr4.30-26.29.1.i586",
"product": {
"name": "java-1_7_1-ibm-alsa-1.7.1_sr4.30-26.29.1.i586",
"product_id": "java-1_7_1-ibm-alsa-1.7.1_sr4.30-26.29.1.i586"
}
},
{
"category": "product_version",
"name": "java-1_7_1-ibm-jdbc-1.7.1_sr4.30-26.29.1.i586",
"product": {
"name": "java-1_7_1-ibm-jdbc-1.7.1_sr4.30-26.29.1.i586",
"product_id": "java-1_7_1-ibm-jdbc-1.7.1_sr4.30-26.29.1.i586"
}
},
{
"category": "product_version",
"name": "java-1_7_1-ibm-plugin-1.7.1_sr4.30-26.29.1.i586",
"product": {
"name": "java-1_7_1-ibm-plugin-1.7.1_sr4.30-26.29.1.i586",
"product_id": "java-1_7_1-ibm-plugin-1.7.1_sr4.30-26.29.1.i586"
}
}
],
"category": "architecture",
"name": "i586"
},
{
"branches": [
{
"category": "product_version",
"name": "java-1_7_1-ibm-devel-1.7.1_sr4.30-26.29.1.ppc64",
"product": {
"name": "java-1_7_1-ibm-devel-1.7.1_sr4.30-26.29.1.ppc64",
"product_id": "java-1_7_1-ibm-devel-1.7.1_sr4.30-26.29.1.ppc64"
}
},
{
"category": "product_version",
"name": "java-1_7_1-ibm-1.7.1_sr4.30-26.29.1.ppc64",
"product": {
"name": "java-1_7_1-ibm-1.7.1_sr4.30-26.29.1.ppc64",
"product_id": "java-1_7_1-ibm-1.7.1_sr4.30-26.29.1.ppc64"
}
},
{
"category": "product_version",
"name": "java-1_7_1-ibm-jdbc-1.7.1_sr4.30-26.29.1.ppc64",
"product": {
"name": "java-1_7_1-ibm-jdbc-1.7.1_sr4.30-26.29.1.ppc64",
"product_id": "java-1_7_1-ibm-jdbc-1.7.1_sr4.30-26.29.1.ppc64"
}
}
],
"category": "architecture",
"name": "ppc64"
},
{
"branches": [
{
"category": "product_version",
"name": "java-1_7_1-ibm-devel-1.7.1_sr4.30-26.29.1.s390x",
"product": {
"name": "java-1_7_1-ibm-devel-1.7.1_sr4.30-26.29.1.s390x",
"product_id": "java-1_7_1-ibm-devel-1.7.1_sr4.30-26.29.1.s390x"
}
},
{
"category": "product_version",
"name": "java-1_7_1-ibm-1.7.1_sr4.30-26.29.1.s390x",
"product": {
"name": "java-1_7_1-ibm-1.7.1_sr4.30-26.29.1.s390x",
"product_id": "java-1_7_1-ibm-1.7.1_sr4.30-26.29.1.s390x"
}
},
{
"category": "product_version",
"name": "java-1_7_1-ibm-jdbc-1.7.1_sr4.30-26.29.1.s390x",
"product": {
"name": "java-1_7_1-ibm-jdbc-1.7.1_sr4.30-26.29.1.s390x",
"product_id": "java-1_7_1-ibm-jdbc-1.7.1_sr4.30-26.29.1.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "java-1_7_1-ibm-devel-1.7.1_sr4.30-26.29.1.x86_64",
"product": {
"name": "java-1_7_1-ibm-devel-1.7.1_sr4.30-26.29.1.x86_64",
"product_id": "java-1_7_1-ibm-devel-1.7.1_sr4.30-26.29.1.x86_64"
}
},
{
"category": "product_version",
"name": "java-1_7_1-ibm-1.7.1_sr4.30-26.29.1.x86_64",
"product": {
"name": "java-1_7_1-ibm-1.7.1_sr4.30-26.29.1.x86_64",
"product_id": "java-1_7_1-ibm-1.7.1_sr4.30-26.29.1.x86_64"
}
},
{
"category": "product_version",
"name": "java-1_7_1-ibm-alsa-1.7.1_sr4.30-26.29.1.x86_64",
"product": {
"name": "java-1_7_1-ibm-alsa-1.7.1_sr4.30-26.29.1.x86_64",
"product_id": "java-1_7_1-ibm-alsa-1.7.1_sr4.30-26.29.1.x86_64"
}
},
{
"category": "product_version",
"name": "java-1_7_1-ibm-jdbc-1.7.1_sr4.30-26.29.1.x86_64",
"product": {
"name": "java-1_7_1-ibm-jdbc-1.7.1_sr4.30-26.29.1.x86_64",
"product_id": "java-1_7_1-ibm-jdbc-1.7.1_sr4.30-26.29.1.x86_64"
}
},
{
"category": "product_version",
"name": "java-1_7_1-ibm-plugin-1.7.1_sr4.30-26.29.1.x86_64",
"product": {
"name": "java-1_7_1-ibm-plugin-1.7.1_sr4.30-26.29.1.x86_64",
"product_id": "java-1_7_1-ibm-plugin-1.7.1_sr4.30-26.29.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux Enterprise Software Development Kit 11 SP4",
"product": {
"name": "SUSE Linux Enterprise Software Development Kit 11 SP4",
"product_id": "SUSE Linux Enterprise Software Development Kit 11 SP4",
"product_identification_helper": {
"cpe": "cpe:/a:suse:sle-sdk:11:sp4"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 11 SP4",
"product": {
"name": "SUSE Linux Enterprise Server 11 SP4",
"product_id": "SUSE Linux Enterprise Server 11 SP4",
"product_identification_helper": {
"cpe": "cpe:/o:suse:suse_sles:11:sp4"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server for SAP Applications 11 SP4",
"product": {
"name": "SUSE Linux Enterprise Server for SAP Applications 11 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles_sap:11:sp4"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-devel-1.7.1_sr4.30-26.29.1.i586 as component of SUSE Linux Enterprise Software Development Kit 11 SP4",
"product_id": "SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.30-26.29.1.i586"
},
"product_reference": "java-1_7_1-ibm-devel-1.7.1_sr4.30-26.29.1.i586",
"relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-devel-1.7.1_sr4.30-26.29.1.ppc64 as component of SUSE Linux Enterprise Software Development Kit 11 SP4",
"product_id": "SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.30-26.29.1.ppc64"
},
"product_reference": "java-1_7_1-ibm-devel-1.7.1_sr4.30-26.29.1.ppc64",
"relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-devel-1.7.1_sr4.30-26.29.1.s390x as component of SUSE Linux Enterprise Software Development Kit 11 SP4",
"product_id": "SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.30-26.29.1.s390x"
},
"product_reference": "java-1_7_1-ibm-devel-1.7.1_sr4.30-26.29.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-devel-1.7.1_sr4.30-26.29.1.x86_64 as component of SUSE Linux Enterprise Software Development Kit 11 SP4",
"product_id": "SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.30-26.29.1.x86_64"
},
"product_reference": "java-1_7_1-ibm-devel-1.7.1_sr4.30-26.29.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-1.7.1_sr4.30-26.29.1.i586 as component of SUSE Linux Enterprise Server 11 SP4",
"product_id": "SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.30-26.29.1.i586"
},
"product_reference": "java-1_7_1-ibm-1.7.1_sr4.30-26.29.1.i586",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-1.7.1_sr4.30-26.29.1.ppc64 as component of SUSE Linux Enterprise Server 11 SP4",
"product_id": "SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.30-26.29.1.ppc64"
},
"product_reference": "java-1_7_1-ibm-1.7.1_sr4.30-26.29.1.ppc64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-1.7.1_sr4.30-26.29.1.s390x as component of SUSE Linux Enterprise Server 11 SP4",
"product_id": "SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.30-26.29.1.s390x"
},
"product_reference": "java-1_7_1-ibm-1.7.1_sr4.30-26.29.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-1.7.1_sr4.30-26.29.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP4",
"product_id": "SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.30-26.29.1.x86_64"
},
"product_reference": "java-1_7_1-ibm-1.7.1_sr4.30-26.29.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-alsa-1.7.1_sr4.30-26.29.1.i586 as component of SUSE Linux Enterprise Server 11 SP4",
"product_id": "SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.30-26.29.1.i586"
},
"product_reference": "java-1_7_1-ibm-alsa-1.7.1_sr4.30-26.29.1.i586",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-alsa-1.7.1_sr4.30-26.29.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP4",
"product_id": "SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.30-26.29.1.x86_64"
},
"product_reference": "java-1_7_1-ibm-alsa-1.7.1_sr4.30-26.29.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-jdbc-1.7.1_sr4.30-26.29.1.i586 as component of SUSE Linux Enterprise Server 11 SP4",
"product_id": "SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-26.29.1.i586"
},
"product_reference": "java-1_7_1-ibm-jdbc-1.7.1_sr4.30-26.29.1.i586",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-jdbc-1.7.1_sr4.30-26.29.1.ppc64 as component of SUSE Linux Enterprise Server 11 SP4",
"product_id": "SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-26.29.1.ppc64"
},
"product_reference": "java-1_7_1-ibm-jdbc-1.7.1_sr4.30-26.29.1.ppc64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-jdbc-1.7.1_sr4.30-26.29.1.s390x as component of SUSE Linux Enterprise Server 11 SP4",
"product_id": "SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-26.29.1.s390x"
},
"product_reference": "java-1_7_1-ibm-jdbc-1.7.1_sr4.30-26.29.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-jdbc-1.7.1_sr4.30-26.29.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP4",
"product_id": "SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-26.29.1.x86_64"
},
"product_reference": "java-1_7_1-ibm-jdbc-1.7.1_sr4.30-26.29.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-plugin-1.7.1_sr4.30-26.29.1.i586 as component of SUSE Linux Enterprise Server 11 SP4",
"product_id": "SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.30-26.29.1.i586"
},
"product_reference": "java-1_7_1-ibm-plugin-1.7.1_sr4.30-26.29.1.i586",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-plugin-1.7.1_sr4.30-26.29.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP4",
"product_id": "SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.30-26.29.1.x86_64"
},
"product_reference": "java-1_7_1-ibm-plugin-1.7.1_sr4.30-26.29.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-1.7.1_sr4.30-26.29.1.i586 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.30-26.29.1.i586"
},
"product_reference": "java-1_7_1-ibm-1.7.1_sr4.30-26.29.1.i586",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-1.7.1_sr4.30-26.29.1.ppc64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.30-26.29.1.ppc64"
},
"product_reference": "java-1_7_1-ibm-1.7.1_sr4.30-26.29.1.ppc64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-1.7.1_sr4.30-26.29.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.30-26.29.1.s390x"
},
"product_reference": "java-1_7_1-ibm-1.7.1_sr4.30-26.29.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-1.7.1_sr4.30-26.29.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.30-26.29.1.x86_64"
},
"product_reference": "java-1_7_1-ibm-1.7.1_sr4.30-26.29.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-alsa-1.7.1_sr4.30-26.29.1.i586 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.30-26.29.1.i586"
},
"product_reference": "java-1_7_1-ibm-alsa-1.7.1_sr4.30-26.29.1.i586",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-alsa-1.7.1_sr4.30-26.29.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.30-26.29.1.x86_64"
},
"product_reference": "java-1_7_1-ibm-alsa-1.7.1_sr4.30-26.29.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-jdbc-1.7.1_sr4.30-26.29.1.i586 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-26.29.1.i586"
},
"product_reference": "java-1_7_1-ibm-jdbc-1.7.1_sr4.30-26.29.1.i586",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-jdbc-1.7.1_sr4.30-26.29.1.ppc64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-26.29.1.ppc64"
},
"product_reference": "java-1_7_1-ibm-jdbc-1.7.1_sr4.30-26.29.1.ppc64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-jdbc-1.7.1_sr4.30-26.29.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-26.29.1.s390x"
},
"product_reference": "java-1_7_1-ibm-jdbc-1.7.1_sr4.30-26.29.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-jdbc-1.7.1_sr4.30-26.29.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-26.29.1.x86_64"
},
"product_reference": "java-1_7_1-ibm-jdbc-1.7.1_sr4.30-26.29.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-plugin-1.7.1_sr4.30-26.29.1.i586 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.30-26.29.1.i586"
},
"product_reference": "java-1_7_1-ibm-plugin-1.7.1_sr4.30-26.29.1.i586",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-plugin-1.7.1_sr4.30-26.29.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.30-26.29.1.x86_64"
},
"product_reference": "java-1_7_1-ibm-plugin-1.7.1_sr4.30-26.29.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2018-12539",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-12539"
}
],
"notes": [
{
"category": "general",
"text": "In Eclipse OpenJ9 version 0.8, users other than the process owner may be able to use Java Attach API to connect to an Eclipse OpenJ9 or IBM JVM on the same machine and use Attach API operations, which includes the ability to execute untrusted native code. Attach API is enabled by default on Windows, Linux and AIX JVMs and can be disabled using the command line option -Dcom.ibm.tools.attach.enable=no.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.30-26.29.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.30-26.29.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.30-26.29.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.30-26.29.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.30-26.29.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.30-26.29.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-26.29.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-26.29.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-26.29.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-26.29.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.30-26.29.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.30-26.29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.30-26.29.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.30-26.29.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.30-26.29.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.30-26.29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.30-26.29.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.30-26.29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-26.29.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-26.29.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-26.29.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-26.29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.30-26.29.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.30-26.29.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.30-26.29.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.30-26.29.1.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.30-26.29.1.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.30-26.29.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-12539",
"url": "https://www.suse.com/security/cve/CVE-2018-12539"
},
{
"category": "external",
"summary": "SUSE Bug 1101645 for CVE-2018-12539",
"url": "https://bugzilla.suse.com/1101645"
},
{
"category": "external",
"summary": "SUSE Bug 1101656 for CVE-2018-12539",
"url": "https://bugzilla.suse.com/1101656"
},
{
"category": "external",
"summary": "SUSE Bug 1104668 for CVE-2018-12539",
"url": "https://bugzilla.suse.com/1104668"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.30-26.29.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.30-26.29.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.30-26.29.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.30-26.29.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.30-26.29.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.30-26.29.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-26.29.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-26.29.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-26.29.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-26.29.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.30-26.29.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.30-26.29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.30-26.29.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.30-26.29.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.30-26.29.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.30-26.29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.30-26.29.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.30-26.29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-26.29.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-26.29.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-26.29.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-26.29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.30-26.29.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.30-26.29.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.30-26.29.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.30-26.29.1.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.30-26.29.1.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.30-26.29.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.4,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.30-26.29.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.30-26.29.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.30-26.29.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.30-26.29.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.30-26.29.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.30-26.29.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-26.29.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-26.29.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-26.29.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-26.29.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.30-26.29.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.30-26.29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.30-26.29.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.30-26.29.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.30-26.29.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.30-26.29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.30-26.29.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.30-26.29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-26.29.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-26.29.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-26.29.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-26.29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.30-26.29.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.30-26.29.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.30-26.29.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.30-26.29.1.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.30-26.29.1.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.30-26.29.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-08-31T13:18:32Z",
"details": "moderate"
}
],
"title": "CVE-2018-12539"
},
{
"cve": "CVE-2018-1517",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-1517"
}
],
"notes": [
{
"category": "general",
"text": "A flaw in the java.math component in IBM SDK, Java Technology Edition 6.0, 7.0, and 8.0 may allow an attacker to inflict a denial-of-service attack with specially crafted String data. IBM X-Force ID: 141681.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.30-26.29.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.30-26.29.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.30-26.29.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.30-26.29.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.30-26.29.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.30-26.29.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-26.29.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-26.29.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-26.29.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-26.29.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.30-26.29.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.30-26.29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.30-26.29.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.30-26.29.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.30-26.29.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.30-26.29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.30-26.29.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.30-26.29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-26.29.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-26.29.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-26.29.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-26.29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.30-26.29.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.30-26.29.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.30-26.29.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.30-26.29.1.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.30-26.29.1.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.30-26.29.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-1517",
"url": "https://www.suse.com/security/cve/CVE-2018-1517"
},
{
"category": "external",
"summary": "SUSE Bug 1101645 for CVE-2018-1517",
"url": "https://bugzilla.suse.com/1101645"
},
{
"category": "external",
"summary": "SUSE Bug 1101656 for CVE-2018-1517",
"url": "https://bugzilla.suse.com/1101656"
},
{
"category": "external",
"summary": "SUSE Bug 1104668 for CVE-2018-1517",
"url": "https://bugzilla.suse.com/1104668"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.30-26.29.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.30-26.29.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.30-26.29.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.30-26.29.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.30-26.29.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.30-26.29.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-26.29.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-26.29.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-26.29.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-26.29.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.30-26.29.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.30-26.29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.30-26.29.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.30-26.29.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.30-26.29.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.30-26.29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.30-26.29.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.30-26.29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-26.29.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-26.29.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-26.29.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-26.29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.30-26.29.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.30-26.29.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.30-26.29.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.30-26.29.1.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.30-26.29.1.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.30-26.29.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.30-26.29.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.30-26.29.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.30-26.29.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.30-26.29.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.30-26.29.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.30-26.29.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-26.29.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-26.29.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-26.29.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-26.29.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.30-26.29.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.30-26.29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.30-26.29.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.30-26.29.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.30-26.29.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.30-26.29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.30-26.29.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.30-26.29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-26.29.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-26.29.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-26.29.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-26.29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.30-26.29.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.30-26.29.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.30-26.29.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.30-26.29.1.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.30-26.29.1.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.30-26.29.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-08-31T13:18:32Z",
"details": "moderate"
}
],
"title": "CVE-2018-1517"
},
{
"cve": "CVE-2018-1656",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-1656"
}
],
"notes": [
{
"category": "general",
"text": "The IBM Java Runtime Environment\u0027s Diagnostic Tooling Framework for Java (DTFJ) (IBM SDK, Java Technology Edition 6.0 , 7.0, and 8.0) does not protect against path traversal attacks when extracting compressed dump files. IBM X-Force ID: 144882.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.30-26.29.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.30-26.29.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.30-26.29.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.30-26.29.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.30-26.29.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.30-26.29.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-26.29.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-26.29.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-26.29.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-26.29.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.30-26.29.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.30-26.29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.30-26.29.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.30-26.29.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.30-26.29.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.30-26.29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.30-26.29.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.30-26.29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-26.29.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-26.29.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-26.29.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-26.29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.30-26.29.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.30-26.29.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.30-26.29.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.30-26.29.1.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.30-26.29.1.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.30-26.29.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-1656",
"url": "https://www.suse.com/security/cve/CVE-2018-1656"
},
{
"category": "external",
"summary": "SUSE Bug 1101645 for CVE-2018-1656",
"url": "https://bugzilla.suse.com/1101645"
},
{
"category": "external",
"summary": "SUSE Bug 1101656 for CVE-2018-1656",
"url": "https://bugzilla.suse.com/1101656"
},
{
"category": "external",
"summary": "SUSE Bug 1104668 for CVE-2018-1656",
"url": "https://bugzilla.suse.com/1104668"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.30-26.29.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.30-26.29.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.30-26.29.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.30-26.29.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.30-26.29.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.30-26.29.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-26.29.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-26.29.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-26.29.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-26.29.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.30-26.29.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.30-26.29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.30-26.29.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.30-26.29.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.30-26.29.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.30-26.29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.30-26.29.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.30-26.29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-26.29.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-26.29.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-26.29.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-26.29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.30-26.29.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.30-26.29.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.30-26.29.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.30-26.29.1.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.30-26.29.1.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.30-26.29.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.4,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:N",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.30-26.29.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.30-26.29.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.30-26.29.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.30-26.29.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.30-26.29.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.30-26.29.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-26.29.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-26.29.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-26.29.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-26.29.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.30-26.29.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.30-26.29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.30-26.29.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.30-26.29.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.30-26.29.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.30-26.29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.30-26.29.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.30-26.29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-26.29.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-26.29.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-26.29.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-26.29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.30-26.29.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.30-26.29.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.30-26.29.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.30-26.29.1.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.30-26.29.1.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.30-26.29.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-08-31T13:18:32Z",
"details": "moderate"
}
],
"title": "CVE-2018-1656"
},
{
"cve": "CVE-2018-2940",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-2940"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries). Supported versions that are affected are Java SE: 6u191, 7u181, 8u172 and 10.0.1; Java SE Embedded: 8u171. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 4.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.30-26.29.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.30-26.29.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.30-26.29.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.30-26.29.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.30-26.29.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.30-26.29.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-26.29.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-26.29.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-26.29.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-26.29.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.30-26.29.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.30-26.29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.30-26.29.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.30-26.29.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.30-26.29.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.30-26.29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.30-26.29.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.30-26.29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-26.29.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-26.29.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-26.29.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-26.29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.30-26.29.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.30-26.29.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.30-26.29.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.30-26.29.1.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.30-26.29.1.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.30-26.29.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-2940",
"url": "https://www.suse.com/security/cve/CVE-2018-2940"
},
{
"category": "external",
"summary": "SUSE Bug 1101645 for CVE-2018-2940",
"url": "https://bugzilla.suse.com/1101645"
},
{
"category": "external",
"summary": "SUSE Bug 1101656 for CVE-2018-2940",
"url": "https://bugzilla.suse.com/1101656"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.30-26.29.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.30-26.29.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.30-26.29.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.30-26.29.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.30-26.29.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.30-26.29.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-26.29.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-26.29.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-26.29.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-26.29.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.30-26.29.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.30-26.29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.30-26.29.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.30-26.29.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.30-26.29.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.30-26.29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.30-26.29.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.30-26.29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-26.29.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-26.29.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-26.29.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-26.29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.30-26.29.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.30-26.29.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.30-26.29.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.30-26.29.1.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.30-26.29.1.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.30-26.29.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.30-26.29.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.30-26.29.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.30-26.29.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.30-26.29.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.30-26.29.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.30-26.29.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-26.29.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-26.29.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-26.29.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-26.29.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.30-26.29.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.30-26.29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.30-26.29.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.30-26.29.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.30-26.29.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.30-26.29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.30-26.29.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.30-26.29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-26.29.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-26.29.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-26.29.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-26.29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.30-26.29.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.30-26.29.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.30-26.29.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.30-26.29.1.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.30-26.29.1.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.30-26.29.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-08-31T13:18:32Z",
"details": "moderate"
}
],
"title": "CVE-2018-2940"
},
{
"cve": "CVE-2018-2952",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-2952"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Concurrency). Supported versions that are affected are Java SE: 6u191, 7u181, 8u172 and 10.0.1; Java SE Embedded: 8u171; JRockit: R28.3.18. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 3.7 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.30-26.29.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.30-26.29.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.30-26.29.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.30-26.29.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.30-26.29.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.30-26.29.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-26.29.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-26.29.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-26.29.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-26.29.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.30-26.29.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.30-26.29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.30-26.29.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.30-26.29.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.30-26.29.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.30-26.29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.30-26.29.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.30-26.29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-26.29.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-26.29.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-26.29.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-26.29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.30-26.29.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.30-26.29.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.30-26.29.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.30-26.29.1.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.30-26.29.1.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.30-26.29.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-2952",
"url": "https://www.suse.com/security/cve/CVE-2018-2952"
},
{
"category": "external",
"summary": "SUSE Bug 1101645 for CVE-2018-2952",
"url": "https://bugzilla.suse.com/1101645"
},
{
"category": "external",
"summary": "SUSE Bug 1101651 for CVE-2018-2952",
"url": "https://bugzilla.suse.com/1101651"
},
{
"category": "external",
"summary": "SUSE Bug 1101656 for CVE-2018-2952",
"url": "https://bugzilla.suse.com/1101656"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.30-26.29.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.30-26.29.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.30-26.29.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.30-26.29.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.30-26.29.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.30-26.29.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-26.29.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-26.29.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-26.29.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-26.29.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.30-26.29.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.30-26.29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.30-26.29.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.30-26.29.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.30-26.29.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.30-26.29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.30-26.29.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.30-26.29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-26.29.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-26.29.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-26.29.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-26.29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.30-26.29.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.30-26.29.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.30-26.29.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.30-26.29.1.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.30-26.29.1.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.30-26.29.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.30-26.29.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.30-26.29.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.30-26.29.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.30-26.29.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.30-26.29.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.30-26.29.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-26.29.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-26.29.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-26.29.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-26.29.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.30-26.29.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.30-26.29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.30-26.29.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.30-26.29.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.30-26.29.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.30-26.29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.30-26.29.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.30-26.29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-26.29.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-26.29.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-26.29.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-26.29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.30-26.29.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.30-26.29.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.30-26.29.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.30-26.29.1.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.30-26.29.1.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.30-26.29.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-08-31T13:18:32Z",
"details": "important"
}
],
"title": "CVE-2018-2952"
},
{
"cve": "CVE-2018-2973",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-2973"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: JSSE). Supported versions that are affected are Java SE: 6u191, 7u181, 8u172 and 10.0.1; Java SE Embedded: 8u171. Difficult to exploit vulnerability allows unauthenticated attacker with network access via SSL/TLS to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 5.9 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.30-26.29.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.30-26.29.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.30-26.29.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.30-26.29.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.30-26.29.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.30-26.29.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-26.29.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-26.29.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-26.29.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-26.29.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.30-26.29.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.30-26.29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.30-26.29.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.30-26.29.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.30-26.29.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.30-26.29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.30-26.29.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.30-26.29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-26.29.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-26.29.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-26.29.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-26.29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.30-26.29.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.30-26.29.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.30-26.29.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.30-26.29.1.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.30-26.29.1.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.30-26.29.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-2973",
"url": "https://www.suse.com/security/cve/CVE-2018-2973"
},
{
"category": "external",
"summary": "SUSE Bug 1101645 for CVE-2018-2973",
"url": "https://bugzilla.suse.com/1101645"
},
{
"category": "external",
"summary": "SUSE Bug 1101656 for CVE-2018-2973",
"url": "https://bugzilla.suse.com/1101656"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.30-26.29.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.30-26.29.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.30-26.29.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.30-26.29.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.30-26.29.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.30-26.29.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-26.29.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-26.29.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-26.29.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-26.29.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.30-26.29.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.30-26.29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.30-26.29.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.30-26.29.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.30-26.29.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.30-26.29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.30-26.29.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.30-26.29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-26.29.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-26.29.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-26.29.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-26.29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.30-26.29.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.30-26.29.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.30-26.29.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.30-26.29.1.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.30-26.29.1.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.30-26.29.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.30-26.29.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.30-26.29.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.30-26.29.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-1.7.1_sr4.30-26.29.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.30-26.29.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.30-26.29.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-26.29.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-26.29.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-26.29.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-26.29.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.30-26.29.1.i586",
"SUSE Linux Enterprise Server 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.30-26.29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.30-26.29.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.30-26.29.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.30-26.29.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-1.7.1_sr4.30-26.29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.30-26.29.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.30-26.29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-26.29.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-26.29.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-26.29.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-26.29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.30-26.29.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.30-26.29.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.30-26.29.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.30-26.29.1.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.30-26.29.1.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.30-26.29.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-08-31T13:18:32Z",
"details": "moderate"
}
],
"title": "CVE-2018-2973"
}
]
}
suse-su-2018:3064-3
Vulnerability from csaf_suse
Published
2019-04-27 14:50
Modified
2019-04-27 14:50
Summary
Security update for java-1_8_0-openjdk
Notes
Title of the patch
Security update for java-1_8_0-openjdk
Description of the patch
This update for java-1_8_0-openjdk to the jdk8u181 (icedtea 3.9.0) release fixes the following issues:
These security issues were fixed:
- CVE-2018-2938: Difficult to exploit vulnerability allowed unauthenticated
attacker with network access via multiple protocols to compromise Java SE.
Successful attacks of this vulnerability can result in takeover of Java SE
(bsc#1101644).
- CVE-2018-2940: Vulnerability in subcomponent: Libraries. Easily exploitable
vulnerability allowed unauthenticated attacker with network access via multiple
protocols to compromise Java SE, Java SE Embedded. Successful attacks require
human interaction from a person other than the attacker. Successful attacks of
this vulnerability can result in unauthorized read access to a subset of Java
SE, Java SE Embedded accessible data (bsc#1101645)
- CVE-2018-2952: Vulnerability in subcomponent: Concurrency. Difficult to
exploit vulnerability allowed unauthenticated attacker with network access via
multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful
attacks of this vulnerability can result in unauthorized ability to cause a
partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit
(bsc#1101651)
- CVE-2018-2973: Vulnerability in subcomponent: JSSE. Difficult to exploit
vulnerability allowed unauthenticated attacker with network access via SSL/TLS
to compromise Java SE, Java SE Embedded. Successful attacks of this
vulnerability can result in unauthorized creation, deletion or modification
access to critical data or all Java SE, Java SE Embedded accessible data
(bsc#1101656)
These non-security issues were fixed:
- Improve desktop file usage
- Better Internet address support
- speculative traps break when classes are redefined
- sun/security/pkcs11/ec/ReadCertificates.java fails intermittently
- Clean up code that saves the previous versions of redefined classes
- Prevent SIGSEGV in ReceiverTypeData::clean_weak_klass_links
- RedefineClasses() tests fail assert(((Metadata*)obj)->is_valid()) failed: obj is valid
- NMT is not enabled if NMT option is specified after class path specifiers
- EndEntityChecker should not process custom extensions after PKIX validation
- SupportedDSAParamGen.java failed with timeout
- Montgomery multiply intrinsic should use correct name
- When determining the ciphersuite lists, there is no debug output for disabled suites.
- sun/security/mscapi/SignedObjectChain.java fails on Windows
- On Windows Swing changes keyboard layout on a window activation
- IfNode::range_check_trap_proj() should handler dying subgraph with single if proj
- Even better Internet address support
- Newlines in JAXB string values of SOAP-requests are escaped to '
'
- TestFlushableGZIPOutputStream failing with IndexOutOfBoundsException
- Unable to use JDWP API in JDK 8 to debug JDK 9 VM
- Hotspot crash on Cassandra 3.11.1 startup with libnuma 2.0.3
- Performance drop with Java JDK 1.8.0_162-b32
- Upgrade time-zone data to tzdata2018d
- Fix potential crash in BufImg_SetupICM
- JDK 8u181 l10n resource file update
- Remove debug print statements from RMI fix
- (tz) Upgrade time-zone data to tzdata2018e
- ObjectInputStream filterCheck method throws NullPointerException
- adjust reflective access checks
Patchnames
SUSE-SLE-SAP-12-SP1-2019-1070
Terms of use
CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for java-1_8_0-openjdk",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This update for java-1_8_0-openjdk to the jdk8u181 (icedtea 3.9.0) release fixes the following issues:\n\nThese security issues were fixed:\n\n- CVE-2018-2938: Difficult to exploit vulnerability allowed unauthenticated\n attacker with network access via multiple protocols to compromise Java SE.\n Successful attacks of this vulnerability can result in takeover of Java SE\n (bsc#1101644).\n- CVE-2018-2940: Vulnerability in subcomponent: Libraries. Easily exploitable\n vulnerability allowed unauthenticated attacker with network access via multiple\n protocols to compromise Java SE, Java SE Embedded. Successful attacks require\n human interaction from a person other than the attacker. Successful attacks of\n this vulnerability can result in unauthorized read access to a subset of Java\n SE, Java SE Embedded accessible data (bsc#1101645)\n- CVE-2018-2952: Vulnerability in subcomponent: Concurrency. Difficult to\n exploit vulnerability allowed unauthenticated attacker with network access via\n multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful\n attacks of this vulnerability can result in unauthorized ability to cause a\n partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit\n (bsc#1101651)\n- CVE-2018-2973: Vulnerability in subcomponent: JSSE. Difficult to exploit\n vulnerability allowed unauthenticated attacker with network access via SSL/TLS\n to compromise Java SE, Java SE Embedded. Successful attacks of this\n vulnerability can result in unauthorized creation, deletion or modification\n access to critical data or all Java SE, Java SE Embedded accessible data\n (bsc#1101656)\n\nThese non-security issues were fixed:\n\n- Improve desktop file usage\n- Better Internet address support\n- speculative traps break when classes are redefined\n- sun/security/pkcs11/ec/ReadCertificates.java fails intermittently\n- Clean up code that saves the previous versions of redefined classes\n- Prevent SIGSEGV in ReceiverTypeData::clean_weak_klass_links\n- RedefineClasses() tests fail assert(((Metadata*)obj)-\u003eis_valid()) failed: obj is valid\n- NMT is not enabled if NMT option is specified after class path specifiers\n- EndEntityChecker should not process custom extensions after PKIX validation\n- SupportedDSAParamGen.java failed with timeout\n- Montgomery multiply intrinsic should use correct name\n- When determining the ciphersuite lists, there is no debug output for disabled suites.\n- sun/security/mscapi/SignedObjectChain.java fails on Windows\n- On Windows Swing changes keyboard layout on a window activation\n- IfNode::range_check_trap_proj() should handler dying subgraph with single if proj\n- Even better Internet address support\n- Newlines in JAXB string values of SOAP-requests are escaped to \u0027\u0026#xa;\u0027\n- TestFlushableGZIPOutputStream failing with IndexOutOfBoundsException\n- Unable to use JDWP API in JDK 8 to debug JDK 9 VM\n- Hotspot crash on Cassandra 3.11.1 startup with libnuma 2.0.3\n- Performance drop with Java JDK 1.8.0_162-b32\n- Upgrade time-zone data to tzdata2018d\n- Fix potential crash in BufImg_SetupICM\n- JDK 8u181 l10n resource file update\n- Remove debug print statements from RMI fix\n- (tz) Upgrade time-zone data to tzdata2018e\n- ObjectInputStream filterCheck method throws NullPointerException\n- adjust reflective access checks\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "SUSE-SLE-SAP-12-SP1-2019-1070",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2018_3064-3.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2018:3064-3",
"url": "https://www.suse.com/support/update/announcement/2018/suse-su-20183064-3/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2018:3064-3",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2019-April/005388.html"
},
{
"category": "self",
"summary": "SUSE Bug 1101644",
"url": "https://bugzilla.suse.com/1101644"
},
{
"category": "self",
"summary": "SUSE Bug 1101645",
"url": "https://bugzilla.suse.com/1101645"
},
{
"category": "self",
"summary": "SUSE Bug 1101651",
"url": "https://bugzilla.suse.com/1101651"
},
{
"category": "self",
"summary": "SUSE Bug 1101656",
"url": "https://bugzilla.suse.com/1101656"
},
{
"category": "self",
"summary": "SUSE Bug 1106812",
"url": "https://bugzilla.suse.com/1106812"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-2938 page",
"url": "https://www.suse.com/security/cve/CVE-2018-2938/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-2940 page",
"url": "https://www.suse.com/security/cve/CVE-2018-2940/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-2952 page",
"url": "https://www.suse.com/security/cve/CVE-2018-2952/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-2973 page",
"url": "https://www.suse.com/security/cve/CVE-2018-2973/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-3639 page",
"url": "https://www.suse.com/security/cve/CVE-2018-3639/"
}
],
"title": "Security update for java-1_8_0-openjdk",
"tracking": {
"current_release_date": "2019-04-27T14:50:46Z",
"generator": {
"date": "2019-04-27T14:50:46Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2018:3064-3",
"initial_release_date": "2019-04-27T14:50:46Z",
"revision_history": [
{
"date": "2019-04-27T14:50:46Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "java-1_8_0-openjdk-1.8.0.181-27.26.2.x86_64",
"product": {
"name": "java-1_8_0-openjdk-1.8.0.181-27.26.2.x86_64",
"product_id": "java-1_8_0-openjdk-1.8.0.181-27.26.2.x86_64"
}
},
{
"category": "product_version",
"name": "java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.x86_64",
"product": {
"name": "java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.x86_64",
"product_id": "java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.x86_64"
}
},
{
"category": "product_version",
"name": "java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.x86_64",
"product": {
"name": "java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.x86_64",
"product_id": "java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.x86_64"
}
},
{
"category": "product_version",
"name": "java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.x86_64",
"product": {
"name": "java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.x86_64",
"product_id": "java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server for SAP Applications 12 SP1",
"product": {
"name": "SUSE Linux Enterprise Server for SAP Applications 12 SP1",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles_sap:12:sp1"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-1.8.0.181-27.26.2.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-openjdk-1.8.0.181-27.26.2.x86_64"
},
"product_reference": "java-1_8_0-openjdk-1.8.0.181-27.26.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.x86_64"
},
"product_reference": "java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.x86_64"
},
"product_reference": "java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.x86_64"
},
"product_reference": "java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2018-2938",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-2938"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Java DB). Supported versions that are affected are Java SE: 6u191, 7u181 and 8u172. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. While the vulnerability is in Java SE, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVE-2018-2938 addresses CVE-2018-1313. CVSS 3.0 Base Score 9.0 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-openjdk-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-2938",
"url": "https://www.suse.com/security/cve/CVE-2018-2938"
},
{
"category": "external",
"summary": "SUSE Bug 1101644 for CVE-2018-2938",
"url": "https://bugzilla.suse.com/1101644"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-openjdk-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-openjdk-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-04-27T14:50:46Z",
"details": "important"
}
],
"title": "CVE-2018-2938"
},
{
"cve": "CVE-2018-2940",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-2940"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries). Supported versions that are affected are Java SE: 6u191, 7u181, 8u172 and 10.0.1; Java SE Embedded: 8u171. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 4.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-openjdk-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-2940",
"url": "https://www.suse.com/security/cve/CVE-2018-2940"
},
{
"category": "external",
"summary": "SUSE Bug 1101645 for CVE-2018-2940",
"url": "https://bugzilla.suse.com/1101645"
},
{
"category": "external",
"summary": "SUSE Bug 1101656 for CVE-2018-2940",
"url": "https://bugzilla.suse.com/1101656"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-openjdk-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-openjdk-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-04-27T14:50:46Z",
"details": "moderate"
}
],
"title": "CVE-2018-2940"
},
{
"cve": "CVE-2018-2952",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-2952"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Concurrency). Supported versions that are affected are Java SE: 6u191, 7u181, 8u172 and 10.0.1; Java SE Embedded: 8u171; JRockit: R28.3.18. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 3.7 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-openjdk-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-2952",
"url": "https://www.suse.com/security/cve/CVE-2018-2952"
},
{
"category": "external",
"summary": "SUSE Bug 1101645 for CVE-2018-2952",
"url": "https://bugzilla.suse.com/1101645"
},
{
"category": "external",
"summary": "SUSE Bug 1101651 for CVE-2018-2952",
"url": "https://bugzilla.suse.com/1101651"
},
{
"category": "external",
"summary": "SUSE Bug 1101656 for CVE-2018-2952",
"url": "https://bugzilla.suse.com/1101656"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-openjdk-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-openjdk-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-04-27T14:50:46Z",
"details": "important"
}
],
"title": "CVE-2018-2952"
},
{
"cve": "CVE-2018-2973",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-2973"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: JSSE). Supported versions that are affected are Java SE: 6u191, 7u181, 8u172 and 10.0.1; Java SE Embedded: 8u171. Difficult to exploit vulnerability allows unauthenticated attacker with network access via SSL/TLS to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 5.9 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-openjdk-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-2973",
"url": "https://www.suse.com/security/cve/CVE-2018-2973"
},
{
"category": "external",
"summary": "SUSE Bug 1101645 for CVE-2018-2973",
"url": "https://bugzilla.suse.com/1101645"
},
{
"category": "external",
"summary": "SUSE Bug 1101656 for CVE-2018-2973",
"url": "https://bugzilla.suse.com/1101656"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-openjdk-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-openjdk-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-04-27T14:50:46Z",
"details": "moderate"
}
],
"title": "CVE-2018-2973"
},
{
"cve": "CVE-2018-3639",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-3639"
}
],
"notes": [
{
"category": "general",
"text": "Systems with microprocessors utilizing speculative execution and speculative execution of memory reads before the addresses of all prior memory writes are known may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis, aka Speculative Store Bypass (SSB), Variant 4.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-openjdk-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-3639",
"url": "https://www.suse.com/security/cve/CVE-2018-3639"
},
{
"category": "external",
"summary": "SUSE Bug 1074701 for CVE-2018-3639",
"url": "https://bugzilla.suse.com/1074701"
},
{
"category": "external",
"summary": "SUSE Bug 1085235 for CVE-2018-3639",
"url": "https://bugzilla.suse.com/1085235"
},
{
"category": "external",
"summary": "SUSE Bug 1085308 for CVE-2018-3639",
"url": "https://bugzilla.suse.com/1085308"
},
{
"category": "external",
"summary": "SUSE Bug 1087078 for CVE-2018-3639",
"url": "https://bugzilla.suse.com/1087078"
},
{
"category": "external",
"summary": "SUSE Bug 1087082 for CVE-2018-3639",
"url": "https://bugzilla.suse.com/1087082"
},
{
"category": "external",
"summary": "SUSE Bug 1092631 for CVE-2018-3639",
"url": "https://bugzilla.suse.com/1092631"
},
{
"category": "external",
"summary": "SUSE Bug 1092885 for CVE-2018-3639",
"url": "https://bugzilla.suse.com/1092885"
},
{
"category": "external",
"summary": "SUSE Bug 1094912 for CVE-2018-3639",
"url": "https://bugzilla.suse.com/1094912"
},
{
"category": "external",
"summary": "SUSE Bug 1098813 for CVE-2018-3639",
"url": "https://bugzilla.suse.com/1098813"
},
{
"category": "external",
"summary": "SUSE Bug 1100394 for CVE-2018-3639",
"url": "https://bugzilla.suse.com/1100394"
},
{
"category": "external",
"summary": "SUSE Bug 1102640 for CVE-2018-3639",
"url": "https://bugzilla.suse.com/1102640"
},
{
"category": "external",
"summary": "SUSE Bug 1105412 for CVE-2018-3639",
"url": "https://bugzilla.suse.com/1105412"
},
{
"category": "external",
"summary": "SUSE Bug 1111963 for CVE-2018-3639",
"url": "https://bugzilla.suse.com/1111963"
},
{
"category": "external",
"summary": "SUSE Bug 1172781 for CVE-2018-3639",
"url": "https://bugzilla.suse.com/1172781"
},
{
"category": "external",
"summary": "SUSE Bug 1172782 for CVE-2018-3639",
"url": "https://bugzilla.suse.com/1172782"
},
{
"category": "external",
"summary": "SUSE Bug 1172783 for CVE-2018-3639",
"url": "https://bugzilla.suse.com/1172783"
},
{
"category": "external",
"summary": "SUSE Bug 1173489 for CVE-2018-3639",
"url": "https://bugzilla.suse.com/1173489"
},
{
"category": "external",
"summary": "SUSE Bug 1178658 for CVE-2018-3639",
"url": "https://bugzilla.suse.com/1178658"
},
{
"category": "external",
"summary": "SUSE Bug 1201877 for CVE-2018-3639",
"url": "https://bugzilla.suse.com/1201877"
},
{
"category": "external",
"summary": "SUSE Bug 1215674 for CVE-2018-3639",
"url": "https://bugzilla.suse.com/1215674"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-openjdk-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-openjdk-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-04-27T14:50:46Z",
"details": "moderate"
}
],
"title": "CVE-2018-3639"
}
]
}
suse-su-2018:3082-1
Vulnerability from csaf_suse
Published
2018-10-09 09:30
Modified
2018-10-09 09:30
Summary
Security update for java-1_8_0-ibm
Notes
Title of the patch
Security update for java-1_8_0-ibm
Description of the patch
This update for java-1_8_0-ibm to 8.0.5.20 fixes the following issues:
- CVE-2018-2952: Vulnerability in subcomponent: Concurrency. Difficult to
exploit vulnerability allowed unauthenticated attacker with network access via
multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful
attacks of this vulnerability can result in unauthorized ability to cause a
partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit
(bsc#1104668).
- CVE-2018-2940: Vulnerability in subcomponent: Libraries. Easily exploitable
vulnerability allowed unauthenticated attacker with network access via multiple
protocols to compromise Java SE, Java SE Embedded. Successful attacks require
human interaction from a person other than the attacker. Successful attacks of
this vulnerability can result in unauthorized read access to a subset of Java
SE, Java SE Embedded accessible data (bsc#1104668).
- CVE-2018-2973: Vulnerability in subcomponent: JSSE. Difficult to exploit
vulnerability allowed unauthenticated attacker with network access via SSL/TLS
to compromise Java SE, Java SE Embedded. Successful attacks of this
vulnerability can result in unauthorized creation, deletion or modification
access to critical data or all Java SE, Java SE Embedded accessible data
(bsc#1104668).
- CVE-2018-2964: Vulnerability in subcomponent: Deployment. Difficult to
exploit vulnerability allowed unauthenticated attacker with network access via
multiple protocols to compromise Java SE. Successful attacks require human
interaction from a person other than the attacker. Successful attacks of this
vulnerability can result in takeover of Java SE. (bsc#1104668).
- CVE-2016-0705: Prevent double free in the dsa_priv_decode function that
allowed remote attackers to cause a denial of service (memory corruption) or
possibly have unspecified other impact via a malformed DSA private key
(bsc#1104668).
- CVE-2017-3732: Prevent carry propagating bug in the x86_64 Montgomery
squaring procedure (bsc#1104668).
- CVE-2017-3736: Prevent carry propagating bug in the x86_64 Montgomery
squaring procedure (bsc#1104668).
- CVE-2018-12539: Users other than the process owner might have been able to
use Java Attach API to connect to an IBM JVM on the same machine and use Attach
API operations, which includes the ability to execute untrusted native code
(bsc#1104668)
- CVE-2018-1517: Unspecified vulnerability (bsc#1104668).
- CVE-2018-1656: Unspecified vulnerability (bsc#1104668)
Patchnames
SUSE-SLE-Module-Legacy-15-2018-2183
Terms of use
CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for java-1_8_0-ibm",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This update for java-1_8_0-ibm to 8.0.5.20 fixes the following issues:\n\n- CVE-2018-2952: Vulnerability in subcomponent: Concurrency. Difficult to\n exploit vulnerability allowed unauthenticated attacker with network access via\n multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful\n attacks of this vulnerability can result in unauthorized ability to cause a\n partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit\n (bsc#1104668).\n- CVE-2018-2940: Vulnerability in subcomponent: Libraries. Easily exploitable\n vulnerability allowed unauthenticated attacker with network access via multiple\n protocols to compromise Java SE, Java SE Embedded. Successful attacks require\n human interaction from a person other than the attacker. Successful attacks of\n this vulnerability can result in unauthorized read access to a subset of Java\n SE, Java SE Embedded accessible data (bsc#1104668).\n- CVE-2018-2973: Vulnerability in subcomponent: JSSE. Difficult to exploit\n vulnerability allowed unauthenticated attacker with network access via SSL/TLS\n to compromise Java SE, Java SE Embedded. Successful attacks of this\n vulnerability can result in unauthorized creation, deletion or modification\n access to critical data or all Java SE, Java SE Embedded accessible data\n (bsc#1104668).\n- CVE-2018-2964: Vulnerability in subcomponent: Deployment. Difficult to\n exploit vulnerability allowed unauthenticated attacker with network access via\n multiple protocols to compromise Java SE. Successful attacks require human\n interaction from a person other than the attacker. Successful attacks of this\n vulnerability can result in takeover of Java SE. (bsc#1104668).\n- CVE-2016-0705: Prevent double free in the dsa_priv_decode function that\n allowed remote attackers to cause a denial of service (memory corruption) or\n possibly have unspecified other impact via a malformed DSA private key\n (bsc#1104668).\n- CVE-2017-3732: Prevent carry propagating bug in the x86_64 Montgomery\n squaring procedure (bsc#1104668).\n- CVE-2017-3736: Prevent carry propagating bug in the x86_64 Montgomery\n squaring procedure (bsc#1104668).\n- CVE-2018-12539: Users other than the process owner might have been able to\n use Java Attach API to connect to an IBM JVM on the same machine and use Attach\n API operations, which includes the ability to execute untrusted native code\n (bsc#1104668) \n- CVE-2018-1517: Unspecified vulnerability (bsc#1104668).\n- CVE-2018-1656: Unspecified vulnerability (bsc#1104668) \n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "SUSE-SLE-Module-Legacy-15-2018-2183",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2018_3082-1.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2018:3082-1",
"url": "https://www.suse.com/support/update/announcement/2018/suse-su-20183082-1/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2018:3082-1",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2018-October/004658.html"
},
{
"category": "self",
"summary": "SUSE Bug 1104668",
"url": "https://bugzilla.suse.com/1104668"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-0705 page",
"url": "https://www.suse.com/security/cve/CVE-2016-0705/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-3732 page",
"url": "https://www.suse.com/security/cve/CVE-2017-3732/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-3736 page",
"url": "https://www.suse.com/security/cve/CVE-2017-3736/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-12539 page",
"url": "https://www.suse.com/security/cve/CVE-2018-12539/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-1517 page",
"url": "https://www.suse.com/security/cve/CVE-2018-1517/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-1656 page",
"url": "https://www.suse.com/security/cve/CVE-2018-1656/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-2940 page",
"url": "https://www.suse.com/security/cve/CVE-2018-2940/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-2952 page",
"url": "https://www.suse.com/security/cve/CVE-2018-2952/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-2964 page",
"url": "https://www.suse.com/security/cve/CVE-2018-2964/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-2973 page",
"url": "https://www.suse.com/security/cve/CVE-2018-2973/"
}
],
"title": "Security update for java-1_8_0-ibm",
"tracking": {
"current_release_date": "2018-10-09T09:30:37Z",
"generator": {
"date": "2018-10-09T09:30:37Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2018:3082-1",
"initial_release_date": "2018-10-09T09:30:37Z",
"revision_history": [
{
"date": "2018-10-09T09:30:37Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "java-1_8_0-ibm-1.8.0_sr5.20-3.6.2.ppc64le",
"product": {
"name": "java-1_8_0-ibm-1.8.0_sr5.20-3.6.2.ppc64le",
"product_id": "java-1_8_0-ibm-1.8.0_sr5.20-3.6.2.ppc64le"
}
},
{
"category": "product_version",
"name": "java-1_8_0-ibm-devel-1.8.0_sr5.20-3.6.2.ppc64le",
"product": {
"name": "java-1_8_0-ibm-devel-1.8.0_sr5.20-3.6.2.ppc64le",
"product_id": "java-1_8_0-ibm-devel-1.8.0_sr5.20-3.6.2.ppc64le"
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "java-1_8_0-ibm-1.8.0_sr5.20-3.6.2.s390x",
"product": {
"name": "java-1_8_0-ibm-1.8.0_sr5.20-3.6.2.s390x",
"product_id": "java-1_8_0-ibm-1.8.0_sr5.20-3.6.2.s390x"
}
},
{
"category": "product_version",
"name": "java-1_8_0-ibm-devel-1.8.0_sr5.20-3.6.2.s390x",
"product": {
"name": "java-1_8_0-ibm-devel-1.8.0_sr5.20-3.6.2.s390x",
"product_id": "java-1_8_0-ibm-devel-1.8.0_sr5.20-3.6.2.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "java-1_8_0-ibm-1.8.0_sr5.20-3.6.2.x86_64",
"product": {
"name": "java-1_8_0-ibm-1.8.0_sr5.20-3.6.2.x86_64",
"product_id": "java-1_8_0-ibm-1.8.0_sr5.20-3.6.2.x86_64"
}
},
{
"category": "product_version",
"name": "java-1_8_0-ibm-alsa-1.8.0_sr5.20-3.6.2.x86_64",
"product": {
"name": "java-1_8_0-ibm-alsa-1.8.0_sr5.20-3.6.2.x86_64",
"product_id": "java-1_8_0-ibm-alsa-1.8.0_sr5.20-3.6.2.x86_64"
}
},
{
"category": "product_version",
"name": "java-1_8_0-ibm-devel-1.8.0_sr5.20-3.6.2.x86_64",
"product": {
"name": "java-1_8_0-ibm-devel-1.8.0_sr5.20-3.6.2.x86_64",
"product_id": "java-1_8_0-ibm-devel-1.8.0_sr5.20-3.6.2.x86_64"
}
},
{
"category": "product_version",
"name": "java-1_8_0-ibm-plugin-1.8.0_sr5.20-3.6.2.x86_64",
"product": {
"name": "java-1_8_0-ibm-plugin-1.8.0_sr5.20-3.6.2.x86_64",
"product_id": "java-1_8_0-ibm-plugin-1.8.0_sr5.20-3.6.2.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux Enterprise Module for Legacy 15",
"product": {
"name": "SUSE Linux Enterprise Module for Legacy 15",
"product_id": "SUSE Linux Enterprise Module for Legacy 15",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle-module-legacy:15"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-ibm-1.8.0_sr5.20-3.6.2.ppc64le as component of SUSE Linux Enterprise Module for Legacy 15",
"product_id": "SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.20-3.6.2.ppc64le"
},
"product_reference": "java-1_8_0-ibm-1.8.0_sr5.20-3.6.2.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Legacy 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-ibm-1.8.0_sr5.20-3.6.2.s390x as component of SUSE Linux Enterprise Module for Legacy 15",
"product_id": "SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.20-3.6.2.s390x"
},
"product_reference": "java-1_8_0-ibm-1.8.0_sr5.20-3.6.2.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Legacy 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-ibm-1.8.0_sr5.20-3.6.2.x86_64 as component of SUSE Linux Enterprise Module for Legacy 15",
"product_id": "SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.20-3.6.2.x86_64"
},
"product_reference": "java-1_8_0-ibm-1.8.0_sr5.20-3.6.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Legacy 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-ibm-alsa-1.8.0_sr5.20-3.6.2.x86_64 as component of SUSE Linux Enterprise Module for Legacy 15",
"product_id": "SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-alsa-1.8.0_sr5.20-3.6.2.x86_64"
},
"product_reference": "java-1_8_0-ibm-alsa-1.8.0_sr5.20-3.6.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Legacy 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-ibm-devel-1.8.0_sr5.20-3.6.2.ppc64le as component of SUSE Linux Enterprise Module for Legacy 15",
"product_id": "SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.20-3.6.2.ppc64le"
},
"product_reference": "java-1_8_0-ibm-devel-1.8.0_sr5.20-3.6.2.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Legacy 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-ibm-devel-1.8.0_sr5.20-3.6.2.s390x as component of SUSE Linux Enterprise Module for Legacy 15",
"product_id": "SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.20-3.6.2.s390x"
},
"product_reference": "java-1_8_0-ibm-devel-1.8.0_sr5.20-3.6.2.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Legacy 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-ibm-devel-1.8.0_sr5.20-3.6.2.x86_64 as component of SUSE Linux Enterprise Module for Legacy 15",
"product_id": "SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.20-3.6.2.x86_64"
},
"product_reference": "java-1_8_0-ibm-devel-1.8.0_sr5.20-3.6.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Legacy 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-ibm-plugin-1.8.0_sr5.20-3.6.2.x86_64 as component of SUSE Linux Enterprise Module for Legacy 15",
"product_id": "SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-plugin-1.8.0_sr5.20-3.6.2.x86_64"
},
"product_reference": "java-1_8_0-ibm-plugin-1.8.0_sr5.20-3.6.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Legacy 15"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2016-0705",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-0705"
}
],
"notes": [
{
"category": "general",
"text": "Double free vulnerability in the dsa_priv_decode function in crypto/dsa/dsa_ameth.c in OpenSSL 1.0.1 before 1.0.1s and 1.0.2 before 1.0.2g allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via a malformed DSA private key.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.20-3.6.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.20-3.6.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.20-3.6.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-alsa-1.8.0_sr5.20-3.6.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.20-3.6.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.20-3.6.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.20-3.6.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-plugin-1.8.0_sr5.20-3.6.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-0705",
"url": "https://www.suse.com/security/cve/CVE-2016-0705"
},
{
"category": "external",
"summary": "SUSE Bug 968044 for CVE-2016-0705",
"url": "https://bugzilla.suse.com/968044"
},
{
"category": "external",
"summary": "SUSE Bug 968047 for CVE-2016-0705",
"url": "https://bugzilla.suse.com/968047"
},
{
"category": "external",
"summary": "SUSE Bug 971238 for CVE-2016-0705",
"url": "https://bugzilla.suse.com/971238"
},
{
"category": "external",
"summary": "SUSE Bug 976341 for CVE-2016-0705",
"url": "https://bugzilla.suse.com/976341"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.20-3.6.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.20-3.6.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.20-3.6.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-alsa-1.8.0_sr5.20-3.6.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.20-3.6.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.20-3.6.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.20-3.6.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-plugin-1.8.0_sr5.20-3.6.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.20-3.6.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.20-3.6.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.20-3.6.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-alsa-1.8.0_sr5.20-3.6.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.20-3.6.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.20-3.6.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.20-3.6.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-plugin-1.8.0_sr5.20-3.6.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-10-09T09:30:37Z",
"details": "low"
}
],
"title": "CVE-2016-0705"
},
{
"cve": "CVE-2017-3732",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-3732"
}
],
"notes": [
{
"category": "general",
"text": "There is a carry propagating bug in the x86_64 Montgomery squaring procedure in OpenSSL 1.0.2 before 1.0.2k and 1.1.0 before 1.1.0d. No EC algorithms are affected. Analysis suggests that attacks against RSA and DSA as a result of this defect would be very difficult to perform and are not believed likely. Attacks against DH are considered just feasible (although very difficult) because most of the work necessary to deduce information about a private key may be performed offline. The amount of resources required for such an attack would be very significant and likely only accessible to a limited number of attackers. An attacker would additionally need online access to an unpatched system using the target private key in a scenario with persistent DH parameters and a private key that is shared between multiple clients. For example this can occur by default in OpenSSL DHE based SSL/TLS ciphersuites. Note: This issue is very similar to CVE-2015-3193 but must be treated as a separate problem.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.20-3.6.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.20-3.6.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.20-3.6.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-alsa-1.8.0_sr5.20-3.6.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.20-3.6.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.20-3.6.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.20-3.6.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-plugin-1.8.0_sr5.20-3.6.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-3732",
"url": "https://www.suse.com/security/cve/CVE-2017-3732"
},
{
"category": "external",
"summary": "SUSE Bug 1021641 for CVE-2017-3732",
"url": "https://bugzilla.suse.com/1021641"
},
{
"category": "external",
"summary": "SUSE Bug 1022086 for CVE-2017-3732",
"url": "https://bugzilla.suse.com/1022086"
},
{
"category": "external",
"summary": "SUSE Bug 1049418 for CVE-2017-3732",
"url": "https://bugzilla.suse.com/1049418"
},
{
"category": "external",
"summary": "SUSE Bug 1049421 for CVE-2017-3732",
"url": "https://bugzilla.suse.com/1049421"
},
{
"category": "external",
"summary": "SUSE Bug 1049422 for CVE-2017-3732",
"url": "https://bugzilla.suse.com/1049422"
},
{
"category": "external",
"summary": "SUSE Bug 1066242 for CVE-2017-3732",
"url": "https://bugzilla.suse.com/1066242"
},
{
"category": "external",
"summary": "SUSE Bug 1071906 for CVE-2017-3732",
"url": "https://bugzilla.suse.com/1071906"
},
{
"category": "external",
"summary": "SUSE Bug 957814 for CVE-2017-3732",
"url": "https://bugzilla.suse.com/957814"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.20-3.6.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.20-3.6.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.20-3.6.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-alsa-1.8.0_sr5.20-3.6.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.20-3.6.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.20-3.6.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.20-3.6.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-plugin-1.8.0_sr5.20-3.6.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.20-3.6.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.20-3.6.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.20-3.6.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-alsa-1.8.0_sr5.20-3.6.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.20-3.6.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.20-3.6.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.20-3.6.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-plugin-1.8.0_sr5.20-3.6.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-10-09T09:30:37Z",
"details": "low"
}
],
"title": "CVE-2017-3732"
},
{
"cve": "CVE-2017-3736",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-3736"
}
],
"notes": [
{
"category": "general",
"text": "There is a carry propagating bug in the x86_64 Montgomery squaring procedure in OpenSSL before 1.0.2m and 1.1.0 before 1.1.0g. No EC algorithms are affected. Analysis suggests that attacks against RSA and DSA as a result of this defect would be very difficult to perform and are not believed likely. Attacks against DH are considered just feasible (although very difficult) because most of the work necessary to deduce information about a private key may be performed offline. The amount of resources required for such an attack would be very significant and likely only accessible to a limited number of attackers. An attacker would additionally need online access to an unpatched system using the target private key in a scenario with persistent DH parameters and a private key that is shared between multiple clients. This only affects processors that support the BMI1, BMI2 and ADX extensions like Intel Broadwell (5th generation) and later or AMD Ryzen.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.20-3.6.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.20-3.6.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.20-3.6.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-alsa-1.8.0_sr5.20-3.6.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.20-3.6.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.20-3.6.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.20-3.6.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-plugin-1.8.0_sr5.20-3.6.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-3736",
"url": "https://www.suse.com/security/cve/CVE-2017-3736"
},
{
"category": "external",
"summary": "SUSE Bug 1066242 for CVE-2017-3736",
"url": "https://bugzilla.suse.com/1066242"
},
{
"category": "external",
"summary": "SUSE Bug 1071906 for CVE-2017-3736",
"url": "https://bugzilla.suse.com/1071906"
},
{
"category": "external",
"summary": "SUSE Bug 1076369 for CVE-2017-3736",
"url": "https://bugzilla.suse.com/1076369"
},
{
"category": "external",
"summary": "SUSE Bug 957814 for CVE-2017-3736",
"url": "https://bugzilla.suse.com/957814"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.20-3.6.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.20-3.6.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.20-3.6.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-alsa-1.8.0_sr5.20-3.6.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.20-3.6.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.20-3.6.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.20-3.6.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-plugin-1.8.0_sr5.20-3.6.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.4,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.20-3.6.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.20-3.6.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.20-3.6.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-alsa-1.8.0_sr5.20-3.6.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.20-3.6.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.20-3.6.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.20-3.6.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-plugin-1.8.0_sr5.20-3.6.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-10-09T09:30:37Z",
"details": "moderate"
}
],
"title": "CVE-2017-3736"
},
{
"cve": "CVE-2018-12539",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-12539"
}
],
"notes": [
{
"category": "general",
"text": "In Eclipse OpenJ9 version 0.8, users other than the process owner may be able to use Java Attach API to connect to an Eclipse OpenJ9 or IBM JVM on the same machine and use Attach API operations, which includes the ability to execute untrusted native code. Attach API is enabled by default on Windows, Linux and AIX JVMs and can be disabled using the command line option -Dcom.ibm.tools.attach.enable=no.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.20-3.6.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.20-3.6.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.20-3.6.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-alsa-1.8.0_sr5.20-3.6.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.20-3.6.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.20-3.6.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.20-3.6.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-plugin-1.8.0_sr5.20-3.6.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-12539",
"url": "https://www.suse.com/security/cve/CVE-2018-12539"
},
{
"category": "external",
"summary": "SUSE Bug 1101645 for CVE-2018-12539",
"url": "https://bugzilla.suse.com/1101645"
},
{
"category": "external",
"summary": "SUSE Bug 1101656 for CVE-2018-12539",
"url": "https://bugzilla.suse.com/1101656"
},
{
"category": "external",
"summary": "SUSE Bug 1104668 for CVE-2018-12539",
"url": "https://bugzilla.suse.com/1104668"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.20-3.6.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.20-3.6.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.20-3.6.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-alsa-1.8.0_sr5.20-3.6.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.20-3.6.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.20-3.6.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.20-3.6.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-plugin-1.8.0_sr5.20-3.6.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.4,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.20-3.6.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.20-3.6.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.20-3.6.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-alsa-1.8.0_sr5.20-3.6.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.20-3.6.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.20-3.6.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.20-3.6.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-plugin-1.8.0_sr5.20-3.6.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-10-09T09:30:37Z",
"details": "moderate"
}
],
"title": "CVE-2018-12539"
},
{
"cve": "CVE-2018-1517",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-1517"
}
],
"notes": [
{
"category": "general",
"text": "A flaw in the java.math component in IBM SDK, Java Technology Edition 6.0, 7.0, and 8.0 may allow an attacker to inflict a denial-of-service attack with specially crafted String data. IBM X-Force ID: 141681.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.20-3.6.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.20-3.6.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.20-3.6.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-alsa-1.8.0_sr5.20-3.6.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.20-3.6.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.20-3.6.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.20-3.6.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-plugin-1.8.0_sr5.20-3.6.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-1517",
"url": "https://www.suse.com/security/cve/CVE-2018-1517"
},
{
"category": "external",
"summary": "SUSE Bug 1101645 for CVE-2018-1517",
"url": "https://bugzilla.suse.com/1101645"
},
{
"category": "external",
"summary": "SUSE Bug 1101656 for CVE-2018-1517",
"url": "https://bugzilla.suse.com/1101656"
},
{
"category": "external",
"summary": "SUSE Bug 1104668 for CVE-2018-1517",
"url": "https://bugzilla.suse.com/1104668"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.20-3.6.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.20-3.6.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.20-3.6.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-alsa-1.8.0_sr5.20-3.6.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.20-3.6.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.20-3.6.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.20-3.6.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-plugin-1.8.0_sr5.20-3.6.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.20-3.6.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.20-3.6.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.20-3.6.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-alsa-1.8.0_sr5.20-3.6.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.20-3.6.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.20-3.6.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.20-3.6.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-plugin-1.8.0_sr5.20-3.6.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-10-09T09:30:37Z",
"details": "moderate"
}
],
"title": "CVE-2018-1517"
},
{
"cve": "CVE-2018-1656",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-1656"
}
],
"notes": [
{
"category": "general",
"text": "The IBM Java Runtime Environment\u0027s Diagnostic Tooling Framework for Java (DTFJ) (IBM SDK, Java Technology Edition 6.0 , 7.0, and 8.0) does not protect against path traversal attacks when extracting compressed dump files. IBM X-Force ID: 144882.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.20-3.6.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.20-3.6.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.20-3.6.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-alsa-1.8.0_sr5.20-3.6.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.20-3.6.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.20-3.6.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.20-3.6.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-plugin-1.8.0_sr5.20-3.6.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-1656",
"url": "https://www.suse.com/security/cve/CVE-2018-1656"
},
{
"category": "external",
"summary": "SUSE Bug 1101645 for CVE-2018-1656",
"url": "https://bugzilla.suse.com/1101645"
},
{
"category": "external",
"summary": "SUSE Bug 1101656 for CVE-2018-1656",
"url": "https://bugzilla.suse.com/1101656"
},
{
"category": "external",
"summary": "SUSE Bug 1104668 for CVE-2018-1656",
"url": "https://bugzilla.suse.com/1104668"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.20-3.6.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.20-3.6.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.20-3.6.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-alsa-1.8.0_sr5.20-3.6.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.20-3.6.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.20-3.6.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.20-3.6.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-plugin-1.8.0_sr5.20-3.6.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.4,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:N",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.20-3.6.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.20-3.6.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.20-3.6.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-alsa-1.8.0_sr5.20-3.6.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.20-3.6.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.20-3.6.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.20-3.6.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-plugin-1.8.0_sr5.20-3.6.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-10-09T09:30:37Z",
"details": "moderate"
}
],
"title": "CVE-2018-1656"
},
{
"cve": "CVE-2018-2940",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-2940"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries). Supported versions that are affected are Java SE: 6u191, 7u181, 8u172 and 10.0.1; Java SE Embedded: 8u171. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 4.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.20-3.6.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.20-3.6.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.20-3.6.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-alsa-1.8.0_sr5.20-3.6.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.20-3.6.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.20-3.6.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.20-3.6.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-plugin-1.8.0_sr5.20-3.6.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-2940",
"url": "https://www.suse.com/security/cve/CVE-2018-2940"
},
{
"category": "external",
"summary": "SUSE Bug 1101645 for CVE-2018-2940",
"url": "https://bugzilla.suse.com/1101645"
},
{
"category": "external",
"summary": "SUSE Bug 1101656 for CVE-2018-2940",
"url": "https://bugzilla.suse.com/1101656"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.20-3.6.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.20-3.6.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.20-3.6.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-alsa-1.8.0_sr5.20-3.6.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.20-3.6.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.20-3.6.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.20-3.6.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-plugin-1.8.0_sr5.20-3.6.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.20-3.6.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.20-3.6.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.20-3.6.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-alsa-1.8.0_sr5.20-3.6.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.20-3.6.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.20-3.6.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.20-3.6.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-plugin-1.8.0_sr5.20-3.6.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-10-09T09:30:37Z",
"details": "moderate"
}
],
"title": "CVE-2018-2940"
},
{
"cve": "CVE-2018-2952",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-2952"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Concurrency). Supported versions that are affected are Java SE: 6u191, 7u181, 8u172 and 10.0.1; Java SE Embedded: 8u171; JRockit: R28.3.18. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 3.7 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.20-3.6.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.20-3.6.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.20-3.6.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-alsa-1.8.0_sr5.20-3.6.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.20-3.6.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.20-3.6.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.20-3.6.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-plugin-1.8.0_sr5.20-3.6.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-2952",
"url": "https://www.suse.com/security/cve/CVE-2018-2952"
},
{
"category": "external",
"summary": "SUSE Bug 1101645 for CVE-2018-2952",
"url": "https://bugzilla.suse.com/1101645"
},
{
"category": "external",
"summary": "SUSE Bug 1101651 for CVE-2018-2952",
"url": "https://bugzilla.suse.com/1101651"
},
{
"category": "external",
"summary": "SUSE Bug 1101656 for CVE-2018-2952",
"url": "https://bugzilla.suse.com/1101656"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.20-3.6.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.20-3.6.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.20-3.6.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-alsa-1.8.0_sr5.20-3.6.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.20-3.6.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.20-3.6.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.20-3.6.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-plugin-1.8.0_sr5.20-3.6.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.20-3.6.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.20-3.6.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.20-3.6.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-alsa-1.8.0_sr5.20-3.6.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.20-3.6.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.20-3.6.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.20-3.6.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-plugin-1.8.0_sr5.20-3.6.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-10-09T09:30:37Z",
"details": "moderate"
}
],
"title": "CVE-2018-2952"
},
{
"cve": "CVE-2018-2964",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-2964"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Deployment). Supported versions that are affected are Java SE: 8u172 and 10.0.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 8.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.20-3.6.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.20-3.6.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.20-3.6.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-alsa-1.8.0_sr5.20-3.6.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.20-3.6.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.20-3.6.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.20-3.6.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-plugin-1.8.0_sr5.20-3.6.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-2964",
"url": "https://www.suse.com/security/cve/CVE-2018-2964"
},
{
"category": "external",
"summary": "SUSE Bug 1101645 for CVE-2018-2964",
"url": "https://bugzilla.suse.com/1101645"
},
{
"category": "external",
"summary": "SUSE Bug 1101653 for CVE-2018-2964",
"url": "https://bugzilla.suse.com/1101653"
},
{
"category": "external",
"summary": "SUSE Bug 1101656 for CVE-2018-2964",
"url": "https://bugzilla.suse.com/1101656"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.20-3.6.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.20-3.6.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.20-3.6.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-alsa-1.8.0_sr5.20-3.6.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.20-3.6.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.20-3.6.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.20-3.6.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-plugin-1.8.0_sr5.20-3.6.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.3,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.20-3.6.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.20-3.6.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.20-3.6.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-alsa-1.8.0_sr5.20-3.6.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.20-3.6.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.20-3.6.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.20-3.6.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-plugin-1.8.0_sr5.20-3.6.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-10-09T09:30:37Z",
"details": "moderate"
}
],
"title": "CVE-2018-2964"
},
{
"cve": "CVE-2018-2973",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-2973"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: JSSE). Supported versions that are affected are Java SE: 6u191, 7u181, 8u172 and 10.0.1; Java SE Embedded: 8u171. Difficult to exploit vulnerability allows unauthenticated attacker with network access via SSL/TLS to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 5.9 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.20-3.6.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.20-3.6.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.20-3.6.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-alsa-1.8.0_sr5.20-3.6.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.20-3.6.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.20-3.6.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.20-3.6.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-plugin-1.8.0_sr5.20-3.6.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-2973",
"url": "https://www.suse.com/security/cve/CVE-2018-2973"
},
{
"category": "external",
"summary": "SUSE Bug 1101645 for CVE-2018-2973",
"url": "https://bugzilla.suse.com/1101645"
},
{
"category": "external",
"summary": "SUSE Bug 1101656 for CVE-2018-2973",
"url": "https://bugzilla.suse.com/1101656"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.20-3.6.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.20-3.6.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.20-3.6.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-alsa-1.8.0_sr5.20-3.6.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.20-3.6.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.20-3.6.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.20-3.6.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-plugin-1.8.0_sr5.20-3.6.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.20-3.6.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.20-3.6.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.20-3.6.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-alsa-1.8.0_sr5.20-3.6.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.20-3.6.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.20-3.6.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.20-3.6.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-plugin-1.8.0_sr5.20-3.6.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-10-09T09:30:37Z",
"details": "moderate"
}
],
"title": "CVE-2018-2973"
}
]
}
suse-su-2019:0049-2
Vulnerability from csaf_suse
Published
2019-04-12 18:44
Modified
2019-04-12 18:44
Summary
Security update for java-1_7_0-openjdk
Notes
Title of the patch
Security update for java-1_7_0-openjdk
Description of the patch
This update for java-1_7_0-openjdk to version 7u201 fixes the following issues:
Security issues fixed:
- CVE-2018-3136: Manifest better support (bsc#1112142)
- CVE-2018-3139: Better HTTP Redirection (bsc#1112143)
- CVE-2018-3149: Enhance JNDI lookups (bsc#1112144)
- CVE-2018-3169: Improve field accesses (bsc#1112146)
- CVE-2018-3180: Improve TLS connections stability (bsc#1112147)
- CVE-2018-3214: Better RIFF reading support (bsc#1112152)
- CVE-2018-13785: Upgrade JDK 8u to libpng 1.6.35 (bsc#1112153)
- CVE-2018-16435: heap-based buffer overflow in SetData function in cmsIT8LoadFromFile
- CVE-2018-2938: Support Derby connections (bsc#1101644)
- CVE-2018-2940: Better stack walking (bsc#1101645)
- CVE-2018-2952: Exception to Pattern Syntax (bsc#1101651)
- CVE-2018-2973: Improve LDAP support (bsc#1101656)
- CVE-2018-3639 cpu speculative store bypass mitigation
Patchnames
SUSE-2019-49,SUSE-SLE-SAP-12-SP1-2019-49
Terms of use
CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for java-1_7_0-openjdk",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This update for java-1_7_0-openjdk to version 7u201 fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2018-3136: Manifest better support (bsc#1112142)\n- CVE-2018-3139: Better HTTP Redirection (bsc#1112143)\n- CVE-2018-3149: Enhance JNDI lookups (bsc#1112144)\n- CVE-2018-3169: Improve field accesses (bsc#1112146)\n- CVE-2018-3180: Improve TLS connections stability (bsc#1112147)\n- CVE-2018-3214: Better RIFF reading support (bsc#1112152)\n- CVE-2018-13785: Upgrade JDK 8u to libpng 1.6.35 (bsc#1112153)\n- CVE-2018-16435: heap-based buffer overflow in SetData function in cmsIT8LoadFromFile\n- CVE-2018-2938: Support Derby connections (bsc#1101644)\n- CVE-2018-2940: Better stack walking (bsc#1101645)\n- CVE-2018-2952: Exception to Pattern Syntax (bsc#1101651)\n- CVE-2018-2973: Improve LDAP support (bsc#1101656)\n- CVE-2018-3639 cpu speculative store bypass mitigation\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "SUSE-2019-49,SUSE-SLE-SAP-12-SP1-2019-49",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2019_0049-2.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2019:0049-2",
"url": "https://www.suse.com/support/update/announcement/2019/suse-su-20190049-2/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2019:0049-2",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2019-April/005335.html"
},
{
"category": "self",
"summary": "SUSE Bug 1101644",
"url": "https://bugzilla.suse.com/1101644"
},
{
"category": "self",
"summary": "SUSE Bug 1101645",
"url": "https://bugzilla.suse.com/1101645"
},
{
"category": "self",
"summary": "SUSE Bug 1101651",
"url": "https://bugzilla.suse.com/1101651"
},
{
"category": "self",
"summary": "SUSE Bug 1101656",
"url": "https://bugzilla.suse.com/1101656"
},
{
"category": "self",
"summary": "SUSE Bug 1112142",
"url": "https://bugzilla.suse.com/1112142"
},
{
"category": "self",
"summary": "SUSE Bug 1112143",
"url": "https://bugzilla.suse.com/1112143"
},
{
"category": "self",
"summary": "SUSE Bug 1112144",
"url": "https://bugzilla.suse.com/1112144"
},
{
"category": "self",
"summary": "SUSE Bug 1112146",
"url": "https://bugzilla.suse.com/1112146"
},
{
"category": "self",
"summary": "SUSE Bug 1112147",
"url": "https://bugzilla.suse.com/1112147"
},
{
"category": "self",
"summary": "SUSE Bug 1112152",
"url": "https://bugzilla.suse.com/1112152"
},
{
"category": "self",
"summary": "SUSE Bug 1112153",
"url": "https://bugzilla.suse.com/1112153"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-13785 page",
"url": "https://www.suse.com/security/cve/CVE-2018-13785/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-16435 page",
"url": "https://www.suse.com/security/cve/CVE-2018-16435/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-2938 page",
"url": "https://www.suse.com/security/cve/CVE-2018-2938/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-2940 page",
"url": "https://www.suse.com/security/cve/CVE-2018-2940/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-2952 page",
"url": "https://www.suse.com/security/cve/CVE-2018-2952/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-2973 page",
"url": "https://www.suse.com/security/cve/CVE-2018-2973/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-3136 page",
"url": "https://www.suse.com/security/cve/CVE-2018-3136/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-3139 page",
"url": "https://www.suse.com/security/cve/CVE-2018-3139/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-3149 page",
"url": "https://www.suse.com/security/cve/CVE-2018-3149/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-3169 page",
"url": "https://www.suse.com/security/cve/CVE-2018-3169/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-3180 page",
"url": "https://www.suse.com/security/cve/CVE-2018-3180/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-3214 page",
"url": "https://www.suse.com/security/cve/CVE-2018-3214/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-3639 page",
"url": "https://www.suse.com/security/cve/CVE-2018-3639/"
}
],
"title": "Security update for java-1_7_0-openjdk",
"tracking": {
"current_release_date": "2019-04-12T18:44:10Z",
"generator": {
"date": "2019-04-12T18:44:10Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2019:0049-2",
"initial_release_date": "2019-04-12T18:44:10Z",
"revision_history": [
{
"date": "2019-04-12T18:44:10Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "java-1_7_0-openjdk-1.7.0.201-43.18.1.aarch64",
"product": {
"name": "java-1_7_0-openjdk-1.7.0.201-43.18.1.aarch64",
"product_id": "java-1_7_0-openjdk-1.7.0.201-43.18.1.aarch64"
}
},
{
"category": "product_version",
"name": "java-1_7_0-openjdk-accessibility-1.7.0.201-43.18.1.aarch64",
"product": {
"name": "java-1_7_0-openjdk-accessibility-1.7.0.201-43.18.1.aarch64",
"product_id": "java-1_7_0-openjdk-accessibility-1.7.0.201-43.18.1.aarch64"
}
},
{
"category": "product_version",
"name": "java-1_7_0-openjdk-bootstrap-1.7.0.201-43.18.1.aarch64",
"product": {
"name": "java-1_7_0-openjdk-bootstrap-1.7.0.201-43.18.1.aarch64",
"product_id": "java-1_7_0-openjdk-bootstrap-1.7.0.201-43.18.1.aarch64"
}
},
{
"category": "product_version",
"name": "java-1_7_0-openjdk-bootstrap-devel-1.7.0.201-43.18.1.aarch64",
"product": {
"name": "java-1_7_0-openjdk-bootstrap-devel-1.7.0.201-43.18.1.aarch64",
"product_id": "java-1_7_0-openjdk-bootstrap-devel-1.7.0.201-43.18.1.aarch64"
}
},
{
"category": "product_version",
"name": "java-1_7_0-openjdk-bootstrap-headless-1.7.0.201-43.18.1.aarch64",
"product": {
"name": "java-1_7_0-openjdk-bootstrap-headless-1.7.0.201-43.18.1.aarch64",
"product_id": "java-1_7_0-openjdk-bootstrap-headless-1.7.0.201-43.18.1.aarch64"
}
},
{
"category": "product_version",
"name": "java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.aarch64",
"product": {
"name": "java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.aarch64",
"product_id": "java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.aarch64"
}
},
{
"category": "product_version",
"name": "java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.aarch64",
"product": {
"name": "java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.aarch64",
"product_id": "java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.aarch64"
}
},
{
"category": "product_version",
"name": "java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.aarch64",
"product": {
"name": "java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.aarch64",
"product_id": "java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.aarch64"
}
},
{
"category": "product_version",
"name": "java-1_7_0-openjdk-src-1.7.0.201-43.18.1.aarch64",
"product": {
"name": "java-1_7_0-openjdk-src-1.7.0.201-43.18.1.aarch64",
"product_id": "java-1_7_0-openjdk-src-1.7.0.201-43.18.1.aarch64"
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "java-1_7_0-openjdk-1.7.0.201-43.18.1.i586",
"product": {
"name": "java-1_7_0-openjdk-1.7.0.201-43.18.1.i586",
"product_id": "java-1_7_0-openjdk-1.7.0.201-43.18.1.i586"
}
},
{
"category": "product_version",
"name": "java-1_7_0-openjdk-accessibility-1.7.0.201-43.18.1.i586",
"product": {
"name": "java-1_7_0-openjdk-accessibility-1.7.0.201-43.18.1.i586",
"product_id": "java-1_7_0-openjdk-accessibility-1.7.0.201-43.18.1.i586"
}
},
{
"category": "product_version",
"name": "java-1_7_0-openjdk-bootstrap-1.7.0.201-43.18.1.i586",
"product": {
"name": "java-1_7_0-openjdk-bootstrap-1.7.0.201-43.18.1.i586",
"product_id": "java-1_7_0-openjdk-bootstrap-1.7.0.201-43.18.1.i586"
}
},
{
"category": "product_version",
"name": "java-1_7_0-openjdk-bootstrap-devel-1.7.0.201-43.18.1.i586",
"product": {
"name": "java-1_7_0-openjdk-bootstrap-devel-1.7.0.201-43.18.1.i586",
"product_id": "java-1_7_0-openjdk-bootstrap-devel-1.7.0.201-43.18.1.i586"
}
},
{
"category": "product_version",
"name": "java-1_7_0-openjdk-bootstrap-headless-1.7.0.201-43.18.1.i586",
"product": {
"name": "java-1_7_0-openjdk-bootstrap-headless-1.7.0.201-43.18.1.i586",
"product_id": "java-1_7_0-openjdk-bootstrap-headless-1.7.0.201-43.18.1.i586"
}
},
{
"category": "product_version",
"name": "java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.i586",
"product": {
"name": "java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.i586",
"product_id": "java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.i586"
}
},
{
"category": "product_version",
"name": "java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.i586",
"product": {
"name": "java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.i586",
"product_id": "java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.i586"
}
},
{
"category": "product_version",
"name": "java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.i586",
"product": {
"name": "java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.i586",
"product_id": "java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.i586"
}
},
{
"category": "product_version",
"name": "java-1_7_0-openjdk-src-1.7.0.201-43.18.1.i586",
"product": {
"name": "java-1_7_0-openjdk-src-1.7.0.201-43.18.1.i586",
"product_id": "java-1_7_0-openjdk-src-1.7.0.201-43.18.1.i586"
}
}
],
"category": "architecture",
"name": "i586"
},
{
"branches": [
{
"category": "product_version",
"name": "java-1_7_0-openjdk-javadoc-1.7.0.201-43.18.1.noarch",
"product": {
"name": "java-1_7_0-openjdk-javadoc-1.7.0.201-43.18.1.noarch",
"product_id": "java-1_7_0-openjdk-javadoc-1.7.0.201-43.18.1.noarch"
}
}
],
"category": "architecture",
"name": "noarch"
},
{
"branches": [
{
"category": "product_version",
"name": "java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"product": {
"name": "java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"product_id": "java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le"
}
},
{
"category": "product_version",
"name": "java-1_7_0-openjdk-accessibility-1.7.0.201-43.18.1.ppc64le",
"product": {
"name": "java-1_7_0-openjdk-accessibility-1.7.0.201-43.18.1.ppc64le",
"product_id": "java-1_7_0-openjdk-accessibility-1.7.0.201-43.18.1.ppc64le"
}
},
{
"category": "product_version",
"name": "java-1_7_0-openjdk-bootstrap-1.7.0.201-43.18.1.ppc64le",
"product": {
"name": "java-1_7_0-openjdk-bootstrap-1.7.0.201-43.18.1.ppc64le",
"product_id": "java-1_7_0-openjdk-bootstrap-1.7.0.201-43.18.1.ppc64le"
}
},
{
"category": "product_version",
"name": "java-1_7_0-openjdk-bootstrap-devel-1.7.0.201-43.18.1.ppc64le",
"product": {
"name": "java-1_7_0-openjdk-bootstrap-devel-1.7.0.201-43.18.1.ppc64le",
"product_id": "java-1_7_0-openjdk-bootstrap-devel-1.7.0.201-43.18.1.ppc64le"
}
},
{
"category": "product_version",
"name": "java-1_7_0-openjdk-bootstrap-headless-1.7.0.201-43.18.1.ppc64le",
"product": {
"name": "java-1_7_0-openjdk-bootstrap-headless-1.7.0.201-43.18.1.ppc64le",
"product_id": "java-1_7_0-openjdk-bootstrap-headless-1.7.0.201-43.18.1.ppc64le"
}
},
{
"category": "product_version",
"name": "java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"product": {
"name": "java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"product_id": "java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le"
}
},
{
"category": "product_version",
"name": "java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"product": {
"name": "java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"product_id": "java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le"
}
},
{
"category": "product_version",
"name": "java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"product": {
"name": "java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"product_id": "java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le"
}
},
{
"category": "product_version",
"name": "java-1_7_0-openjdk-src-1.7.0.201-43.18.1.ppc64le",
"product": {
"name": "java-1_7_0-openjdk-src-1.7.0.201-43.18.1.ppc64le",
"product_id": "java-1_7_0-openjdk-src-1.7.0.201-43.18.1.ppc64le"
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "java-1_7_0-openjdk-1.7.0.201-43.18.1.s390",
"product": {
"name": "java-1_7_0-openjdk-1.7.0.201-43.18.1.s390",
"product_id": "java-1_7_0-openjdk-1.7.0.201-43.18.1.s390"
}
},
{
"category": "product_version",
"name": "java-1_7_0-openjdk-accessibility-1.7.0.201-43.18.1.s390",
"product": {
"name": "java-1_7_0-openjdk-accessibility-1.7.0.201-43.18.1.s390",
"product_id": "java-1_7_0-openjdk-accessibility-1.7.0.201-43.18.1.s390"
}
},
{
"category": "product_version",
"name": "java-1_7_0-openjdk-bootstrap-1.7.0.201-43.18.1.s390",
"product": {
"name": "java-1_7_0-openjdk-bootstrap-1.7.0.201-43.18.1.s390",
"product_id": "java-1_7_0-openjdk-bootstrap-1.7.0.201-43.18.1.s390"
}
},
{
"category": "product_version",
"name": "java-1_7_0-openjdk-bootstrap-devel-1.7.0.201-43.18.1.s390",
"product": {
"name": "java-1_7_0-openjdk-bootstrap-devel-1.7.0.201-43.18.1.s390",
"product_id": "java-1_7_0-openjdk-bootstrap-devel-1.7.0.201-43.18.1.s390"
}
},
{
"category": "product_version",
"name": "java-1_7_0-openjdk-bootstrap-headless-1.7.0.201-43.18.1.s390",
"product": {
"name": "java-1_7_0-openjdk-bootstrap-headless-1.7.0.201-43.18.1.s390",
"product_id": "java-1_7_0-openjdk-bootstrap-headless-1.7.0.201-43.18.1.s390"
}
},
{
"category": "product_version",
"name": "java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390",
"product": {
"name": "java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390",
"product_id": "java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390"
}
},
{
"category": "product_version",
"name": "java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390",
"product": {
"name": "java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390",
"product_id": "java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390"
}
},
{
"category": "product_version",
"name": "java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390",
"product": {
"name": "java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390",
"product_id": "java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390"
}
},
{
"category": "product_version",
"name": "java-1_7_0-openjdk-src-1.7.0.201-43.18.1.s390",
"product": {
"name": "java-1_7_0-openjdk-src-1.7.0.201-43.18.1.s390",
"product_id": "java-1_7_0-openjdk-src-1.7.0.201-43.18.1.s390"
}
}
],
"category": "architecture",
"name": "s390"
},
{
"branches": [
{
"category": "product_version",
"name": "java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"product": {
"name": "java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"product_id": "java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x"
}
},
{
"category": "product_version",
"name": "java-1_7_0-openjdk-accessibility-1.7.0.201-43.18.1.s390x",
"product": {
"name": "java-1_7_0-openjdk-accessibility-1.7.0.201-43.18.1.s390x",
"product_id": "java-1_7_0-openjdk-accessibility-1.7.0.201-43.18.1.s390x"
}
},
{
"category": "product_version",
"name": "java-1_7_0-openjdk-bootstrap-1.7.0.201-43.18.1.s390x",
"product": {
"name": "java-1_7_0-openjdk-bootstrap-1.7.0.201-43.18.1.s390x",
"product_id": "java-1_7_0-openjdk-bootstrap-1.7.0.201-43.18.1.s390x"
}
},
{
"category": "product_version",
"name": "java-1_7_0-openjdk-bootstrap-devel-1.7.0.201-43.18.1.s390x",
"product": {
"name": "java-1_7_0-openjdk-bootstrap-devel-1.7.0.201-43.18.1.s390x",
"product_id": "java-1_7_0-openjdk-bootstrap-devel-1.7.0.201-43.18.1.s390x"
}
},
{
"category": "product_version",
"name": "java-1_7_0-openjdk-bootstrap-headless-1.7.0.201-43.18.1.s390x",
"product": {
"name": "java-1_7_0-openjdk-bootstrap-headless-1.7.0.201-43.18.1.s390x",
"product_id": "java-1_7_0-openjdk-bootstrap-headless-1.7.0.201-43.18.1.s390x"
}
},
{
"category": "product_version",
"name": "java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"product": {
"name": "java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"product_id": "java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x"
}
},
{
"category": "product_version",
"name": "java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"product": {
"name": "java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"product_id": "java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x"
}
},
{
"category": "product_version",
"name": "java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"product": {
"name": "java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"product_id": "java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x"
}
},
{
"category": "product_version",
"name": "java-1_7_0-openjdk-src-1.7.0.201-43.18.1.s390x",
"product": {
"name": "java-1_7_0-openjdk-src-1.7.0.201-43.18.1.s390x",
"product_id": "java-1_7_0-openjdk-src-1.7.0.201-43.18.1.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"product": {
"name": "java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"product_id": "java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64"
}
},
{
"category": "product_version",
"name": "java-1_7_0-openjdk-accessibility-1.7.0.201-43.18.1.x86_64",
"product": {
"name": "java-1_7_0-openjdk-accessibility-1.7.0.201-43.18.1.x86_64",
"product_id": "java-1_7_0-openjdk-accessibility-1.7.0.201-43.18.1.x86_64"
}
},
{
"category": "product_version",
"name": "java-1_7_0-openjdk-bootstrap-1.7.0.201-43.18.1.x86_64",
"product": {
"name": "java-1_7_0-openjdk-bootstrap-1.7.0.201-43.18.1.x86_64",
"product_id": "java-1_7_0-openjdk-bootstrap-1.7.0.201-43.18.1.x86_64"
}
},
{
"category": "product_version",
"name": "java-1_7_0-openjdk-bootstrap-devel-1.7.0.201-43.18.1.x86_64",
"product": {
"name": "java-1_7_0-openjdk-bootstrap-devel-1.7.0.201-43.18.1.x86_64",
"product_id": "java-1_7_0-openjdk-bootstrap-devel-1.7.0.201-43.18.1.x86_64"
}
},
{
"category": "product_version",
"name": "java-1_7_0-openjdk-bootstrap-headless-1.7.0.201-43.18.1.x86_64",
"product": {
"name": "java-1_7_0-openjdk-bootstrap-headless-1.7.0.201-43.18.1.x86_64",
"product_id": "java-1_7_0-openjdk-bootstrap-headless-1.7.0.201-43.18.1.x86_64"
}
},
{
"category": "product_version",
"name": "java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"product": {
"name": "java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"product_id": "java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64"
}
},
{
"category": "product_version",
"name": "java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"product": {
"name": "java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"product_id": "java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64"
}
},
{
"category": "product_version",
"name": "java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"product": {
"name": "java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"product_id": "java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64"
}
},
{
"category": "product_version",
"name": "java-1_7_0-openjdk-src-1.7.0.201-43.18.1.x86_64",
"product": {
"name": "java-1_7_0-openjdk-src-1.7.0.201-43.18.1.x86_64",
"product_id": "java-1_7_0-openjdk-src-1.7.0.201-43.18.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server for SAP Applications 12 SP1",
"product": {
"name": "SUSE Linux Enterprise Server for SAP Applications 12 SP1",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles_sap:12:sp1"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64"
},
"product_reference": "java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64"
},
"product_reference": "java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64"
},
"product_reference": "java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64"
},
"product_reference": "java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2018-13785",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-13785"
}
],
"notes": [
{
"category": "general",
"text": "In libpng 1.6.34, a wrong calculation of row_factor in the png_check_chunk_length function (pngrutil.c) may trigger an integer overflow and resultant divide-by-zero while processing a crafted PNG file, leading to a denial of service.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-13785",
"url": "https://www.suse.com/security/cve/CVE-2018-13785"
},
{
"category": "external",
"summary": "SUSE Bug 1100687 for CVE-2018-13785",
"url": "https://bugzilla.suse.com/1100687"
},
{
"category": "external",
"summary": "SUSE Bug 1112153 for CVE-2018-13785",
"url": "https://bugzilla.suse.com/1112153"
},
{
"category": "external",
"summary": "SUSE Bug 1116574 for CVE-2018-13785",
"url": "https://bugzilla.suse.com/1116574"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-04-12T18:44:10Z",
"details": "low"
}
],
"title": "CVE-2018-13785"
},
{
"cve": "CVE-2018-16435",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-16435"
}
],
"notes": [
{
"category": "general",
"text": "Little CMS (aka Little Color Management System) 2.9 has an integer overflow in the AllocateDataSet function in cmscgats.c, leading to a heap-based buffer overflow in the SetData function via a crafted file in the second argument to cmsIT8LoadFromFile.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-16435",
"url": "https://www.suse.com/security/cve/CVE-2018-16435"
},
{
"category": "external",
"summary": "SUSE Bug 1108813 for CVE-2018-16435",
"url": "https://bugzilla.suse.com/1108813"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-04-12T18:44:10Z",
"details": "moderate"
}
],
"title": "CVE-2018-16435"
},
{
"cve": "CVE-2018-2938",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-2938"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Java DB). Supported versions that are affected are Java SE: 6u191, 7u181 and 8u172. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. While the vulnerability is in Java SE, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVE-2018-2938 addresses CVE-2018-1313. CVSS 3.0 Base Score 9.0 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-2938",
"url": "https://www.suse.com/security/cve/CVE-2018-2938"
},
{
"category": "external",
"summary": "SUSE Bug 1101644 for CVE-2018-2938",
"url": "https://bugzilla.suse.com/1101644"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-04-12T18:44:10Z",
"details": "important"
}
],
"title": "CVE-2018-2938"
},
{
"cve": "CVE-2018-2940",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-2940"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries). Supported versions that are affected are Java SE: 6u191, 7u181, 8u172 and 10.0.1; Java SE Embedded: 8u171. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 4.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-2940",
"url": "https://www.suse.com/security/cve/CVE-2018-2940"
},
{
"category": "external",
"summary": "SUSE Bug 1101645 for CVE-2018-2940",
"url": "https://bugzilla.suse.com/1101645"
},
{
"category": "external",
"summary": "SUSE Bug 1101656 for CVE-2018-2940",
"url": "https://bugzilla.suse.com/1101656"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-04-12T18:44:10Z",
"details": "moderate"
}
],
"title": "CVE-2018-2940"
},
{
"cve": "CVE-2018-2952",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-2952"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Concurrency). Supported versions that are affected are Java SE: 6u191, 7u181, 8u172 and 10.0.1; Java SE Embedded: 8u171; JRockit: R28.3.18. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 3.7 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-2952",
"url": "https://www.suse.com/security/cve/CVE-2018-2952"
},
{
"category": "external",
"summary": "SUSE Bug 1101645 for CVE-2018-2952",
"url": "https://bugzilla.suse.com/1101645"
},
{
"category": "external",
"summary": "SUSE Bug 1101651 for CVE-2018-2952",
"url": "https://bugzilla.suse.com/1101651"
},
{
"category": "external",
"summary": "SUSE Bug 1101656 for CVE-2018-2952",
"url": "https://bugzilla.suse.com/1101656"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-04-12T18:44:10Z",
"details": "important"
}
],
"title": "CVE-2018-2952"
},
{
"cve": "CVE-2018-2973",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-2973"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: JSSE). Supported versions that are affected are Java SE: 6u191, 7u181, 8u172 and 10.0.1; Java SE Embedded: 8u171. Difficult to exploit vulnerability allows unauthenticated attacker with network access via SSL/TLS to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 5.9 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-2973",
"url": "https://www.suse.com/security/cve/CVE-2018-2973"
},
{
"category": "external",
"summary": "SUSE Bug 1101645 for CVE-2018-2973",
"url": "https://bugzilla.suse.com/1101645"
},
{
"category": "external",
"summary": "SUSE Bug 1101656 for CVE-2018-2973",
"url": "https://bugzilla.suse.com/1101656"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-04-12T18:44:10Z",
"details": "moderate"
}
],
"title": "CVE-2018-2973"
},
{
"cve": "CVE-2018-3136",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-3136"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u201, 7u191, 8u182 and 11; Java SE Embedded: 8u181. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, Java SE Embedded, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g. code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g. code installed by an administrator). CVSS 3.0 Base Score 3.4 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:L/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-3136",
"url": "https://www.suse.com/security/cve/CVE-2018-3136"
},
{
"category": "external",
"summary": "SUSE Bug 1112142 for CVE-2018-3136",
"url": "https://bugzilla.suse.com/1112142"
},
{
"category": "external",
"summary": "SUSE Bug 1112143 for CVE-2018-3136",
"url": "https://bugzilla.suse.com/1112143"
},
{
"category": "external",
"summary": "SUSE Bug 1112144 for CVE-2018-3136",
"url": "https://bugzilla.suse.com/1112144"
},
{
"category": "external",
"summary": "SUSE Bug 1112146 for CVE-2018-3136",
"url": "https://bugzilla.suse.com/1112146"
},
{
"category": "external",
"summary": "SUSE Bug 1112148 for CVE-2018-3136",
"url": "https://bugzilla.suse.com/1112148"
},
{
"category": "external",
"summary": "SUSE Bug 1112152 for CVE-2018-3136",
"url": "https://bugzilla.suse.com/1112152"
},
{
"category": "external",
"summary": "SUSE Bug 1116574 for CVE-2018-3136",
"url": "https://bugzilla.suse.com/1116574"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.1,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-04-12T18:44:10Z",
"details": "moderate"
}
],
"title": "CVE-2018-3136"
},
{
"cve": "CVE-2018-3139",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-3139"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Networking). Supported versions that are affected are Java SE: 6u201, 7u191, 8u182 and 11; Java SE Embedded: 8u181. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g. code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g. code installed by an administrator). CVSS 3.0 Base Score 3.1 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-3139",
"url": "https://www.suse.com/security/cve/CVE-2018-3139"
},
{
"category": "external",
"summary": "SUSE Bug 1112142 for CVE-2018-3139",
"url": "https://bugzilla.suse.com/1112142"
},
{
"category": "external",
"summary": "SUSE Bug 1112143 for CVE-2018-3139",
"url": "https://bugzilla.suse.com/1112143"
},
{
"category": "external",
"summary": "SUSE Bug 1112144 for CVE-2018-3139",
"url": "https://bugzilla.suse.com/1112144"
},
{
"category": "external",
"summary": "SUSE Bug 1112146 for CVE-2018-3139",
"url": "https://bugzilla.suse.com/1112146"
},
{
"category": "external",
"summary": "SUSE Bug 1112148 for CVE-2018-3139",
"url": "https://bugzilla.suse.com/1112148"
},
{
"category": "external",
"summary": "SUSE Bug 1112152 for CVE-2018-3139",
"url": "https://bugzilla.suse.com/1112152"
},
{
"category": "external",
"summary": "SUSE Bug 1116574 for CVE-2018-3139",
"url": "https://bugzilla.suse.com/1116574"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.1,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-04-12T18:44:10Z",
"details": "moderate"
}
],
"title": "CVE-2018-3139"
},
{
"cve": "CVE-2018-3149",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-3149"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JNDI). Supported versions that are affected are Java SE: 6u201, 7u191, 8u182 and 11; Java SE Embedded: 8u181; JRockit: R28.3.19. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, Java SE Embedded, JRockit, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE, Java SE Embedded, JRockit. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g. code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g. through a web service which supplies data to the APIs. CVSS 3.0 Base Score 8.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-3149",
"url": "https://www.suse.com/security/cve/CVE-2018-3149"
},
{
"category": "external",
"summary": "SUSE Bug 1112142 for CVE-2018-3149",
"url": "https://bugzilla.suse.com/1112142"
},
{
"category": "external",
"summary": "SUSE Bug 1112143 for CVE-2018-3149",
"url": "https://bugzilla.suse.com/1112143"
},
{
"category": "external",
"summary": "SUSE Bug 1112144 for CVE-2018-3149",
"url": "https://bugzilla.suse.com/1112144"
},
{
"category": "external",
"summary": "SUSE Bug 1112146 for CVE-2018-3149",
"url": "https://bugzilla.suse.com/1112146"
},
{
"category": "external",
"summary": "SUSE Bug 1112148 for CVE-2018-3149",
"url": "https://bugzilla.suse.com/1112148"
},
{
"category": "external",
"summary": "SUSE Bug 1112152 for CVE-2018-3149",
"url": "https://bugzilla.suse.com/1112152"
},
{
"category": "external",
"summary": "SUSE Bug 1116574 for CVE-2018-3149",
"url": "https://bugzilla.suse.com/1116574"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.3,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-04-12T18:44:10Z",
"details": "moderate"
}
],
"title": "CVE-2018-3149"
},
{
"cve": "CVE-2018-3169",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-3169"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Hotspot). Supported versions that are affected are Java SE: 7u191, 8u182 and 11; Java SE Embedded: 8u181. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, Java SE Embedded, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g. code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g. code installed by an administrator). CVSS 3.0 Base Score 8.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-3169",
"url": "https://www.suse.com/security/cve/CVE-2018-3169"
},
{
"category": "external",
"summary": "SUSE Bug 1112142 for CVE-2018-3169",
"url": "https://bugzilla.suse.com/1112142"
},
{
"category": "external",
"summary": "SUSE Bug 1112143 for CVE-2018-3169",
"url": "https://bugzilla.suse.com/1112143"
},
{
"category": "external",
"summary": "SUSE Bug 1112144 for CVE-2018-3169",
"url": "https://bugzilla.suse.com/1112144"
},
{
"category": "external",
"summary": "SUSE Bug 1112146 for CVE-2018-3169",
"url": "https://bugzilla.suse.com/1112146"
},
{
"category": "external",
"summary": "SUSE Bug 1112148 for CVE-2018-3169",
"url": "https://bugzilla.suse.com/1112148"
},
{
"category": "external",
"summary": "SUSE Bug 1112152 for CVE-2018-3169",
"url": "https://bugzilla.suse.com/1112152"
},
{
"category": "external",
"summary": "SUSE Bug 1116574 for CVE-2018-3169",
"url": "https://bugzilla.suse.com/1116574"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.3,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-04-12T18:44:10Z",
"details": "moderate"
}
],
"title": "CVE-2018-3169"
},
{
"cve": "CVE-2018-3180",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-3180"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JSSE). Supported versions that are affected are Java SE: 6u201, 7u191, 8u182 and 11; Java SE Embedded: 8u181; JRockit: R28.3.19. Difficult to exploit vulnerability allows unauthenticated attacker with network access via SSL/TLS to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded, JRockit accessible data as well as unauthorized read access to a subset of Java SE, Java SE Embedded, JRockit accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g. code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g. through a web service which supplies data to the APIs. CVSS 3.0 Base Score 5.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-3180",
"url": "https://www.suse.com/security/cve/CVE-2018-3180"
},
{
"category": "external",
"summary": "SUSE Bug 1112142 for CVE-2018-3180",
"url": "https://bugzilla.suse.com/1112142"
},
{
"category": "external",
"summary": "SUSE Bug 1112143 for CVE-2018-3180",
"url": "https://bugzilla.suse.com/1112143"
},
{
"category": "external",
"summary": "SUSE Bug 1112144 for CVE-2018-3180",
"url": "https://bugzilla.suse.com/1112144"
},
{
"category": "external",
"summary": "SUSE Bug 1112146 for CVE-2018-3180",
"url": "https://bugzilla.suse.com/1112146"
},
{
"category": "external",
"summary": "SUSE Bug 1112147 for CVE-2018-3180",
"url": "https://bugzilla.suse.com/1112147"
},
{
"category": "external",
"summary": "SUSE Bug 1112148 for CVE-2018-3180",
"url": "https://bugzilla.suse.com/1112148"
},
{
"category": "external",
"summary": "SUSE Bug 1112152 for CVE-2018-3180",
"url": "https://bugzilla.suse.com/1112152"
},
{
"category": "external",
"summary": "SUSE Bug 1116574 for CVE-2018-3180",
"url": "https://bugzilla.suse.com/1116574"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.6,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-04-12T18:44:10Z",
"details": "moderate"
}
],
"title": "CVE-2018-3180"
},
{
"cve": "CVE-2018-3214",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-3214"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Sound). Supported versions that are affected are Java SE: 6u201, 7u191 and 8u182; Java SE Embedded: 8u181; JRockit: R28.3.19. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g. through a web service which supplies data to the APIs. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-3214",
"url": "https://www.suse.com/security/cve/CVE-2018-3214"
},
{
"category": "external",
"summary": "SUSE Bug 1112142 for CVE-2018-3214",
"url": "https://bugzilla.suse.com/1112142"
},
{
"category": "external",
"summary": "SUSE Bug 1112143 for CVE-2018-3214",
"url": "https://bugzilla.suse.com/1112143"
},
{
"category": "external",
"summary": "SUSE Bug 1112144 for CVE-2018-3214",
"url": "https://bugzilla.suse.com/1112144"
},
{
"category": "external",
"summary": "SUSE Bug 1112146 for CVE-2018-3214",
"url": "https://bugzilla.suse.com/1112146"
},
{
"category": "external",
"summary": "SUSE Bug 1112148 for CVE-2018-3214",
"url": "https://bugzilla.suse.com/1112148"
},
{
"category": "external",
"summary": "SUSE Bug 1112152 for CVE-2018-3214",
"url": "https://bugzilla.suse.com/1112152"
},
{
"category": "external",
"summary": "SUSE Bug 1116574 for CVE-2018-3214",
"url": "https://bugzilla.suse.com/1116574"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-04-12T18:44:10Z",
"details": "moderate"
}
],
"title": "CVE-2018-3214"
},
{
"cve": "CVE-2018-3639",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-3639"
}
],
"notes": [
{
"category": "general",
"text": "Systems with microprocessors utilizing speculative execution and speculative execution of memory reads before the addresses of all prior memory writes are known may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis, aka Speculative Store Bypass (SSB), Variant 4.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-3639",
"url": "https://www.suse.com/security/cve/CVE-2018-3639"
},
{
"category": "external",
"summary": "SUSE Bug 1074701 for CVE-2018-3639",
"url": "https://bugzilla.suse.com/1074701"
},
{
"category": "external",
"summary": "SUSE Bug 1085235 for CVE-2018-3639",
"url": "https://bugzilla.suse.com/1085235"
},
{
"category": "external",
"summary": "SUSE Bug 1085308 for CVE-2018-3639",
"url": "https://bugzilla.suse.com/1085308"
},
{
"category": "external",
"summary": "SUSE Bug 1087078 for CVE-2018-3639",
"url": "https://bugzilla.suse.com/1087078"
},
{
"category": "external",
"summary": "SUSE Bug 1087082 for CVE-2018-3639",
"url": "https://bugzilla.suse.com/1087082"
},
{
"category": "external",
"summary": "SUSE Bug 1092631 for CVE-2018-3639",
"url": "https://bugzilla.suse.com/1092631"
},
{
"category": "external",
"summary": "SUSE Bug 1092885 for CVE-2018-3639",
"url": "https://bugzilla.suse.com/1092885"
},
{
"category": "external",
"summary": "SUSE Bug 1094912 for CVE-2018-3639",
"url": "https://bugzilla.suse.com/1094912"
},
{
"category": "external",
"summary": "SUSE Bug 1098813 for CVE-2018-3639",
"url": "https://bugzilla.suse.com/1098813"
},
{
"category": "external",
"summary": "SUSE Bug 1100394 for CVE-2018-3639",
"url": "https://bugzilla.suse.com/1100394"
},
{
"category": "external",
"summary": "SUSE Bug 1102640 for CVE-2018-3639",
"url": "https://bugzilla.suse.com/1102640"
},
{
"category": "external",
"summary": "SUSE Bug 1105412 for CVE-2018-3639",
"url": "https://bugzilla.suse.com/1105412"
},
{
"category": "external",
"summary": "SUSE Bug 1111963 for CVE-2018-3639",
"url": "https://bugzilla.suse.com/1111963"
},
{
"category": "external",
"summary": "SUSE Bug 1172781 for CVE-2018-3639",
"url": "https://bugzilla.suse.com/1172781"
},
{
"category": "external",
"summary": "SUSE Bug 1172782 for CVE-2018-3639",
"url": "https://bugzilla.suse.com/1172782"
},
{
"category": "external",
"summary": "SUSE Bug 1172783 for CVE-2018-3639",
"url": "https://bugzilla.suse.com/1172783"
},
{
"category": "external",
"summary": "SUSE Bug 1173489 for CVE-2018-3639",
"url": "https://bugzilla.suse.com/1173489"
},
{
"category": "external",
"summary": "SUSE Bug 1178658 for CVE-2018-3639",
"url": "https://bugzilla.suse.com/1178658"
},
{
"category": "external",
"summary": "SUSE Bug 1201877 for CVE-2018-3639",
"url": "https://bugzilla.suse.com/1201877"
},
{
"category": "external",
"summary": "SUSE Bug 1215674 for CVE-2018-3639",
"url": "https://bugzilla.suse.com/1215674"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-04-12T18:44:10Z",
"details": "moderate"
}
],
"title": "CVE-2018-3639"
}
]
}
suse-su-2018:2083-1
Vulnerability from csaf_suse
Published
2018-07-27 12:39
Modified
2018-07-27 12:39
Summary
Security update for java-10-openjdk
Notes
Title of the patch
Security update for java-10-openjdk
Description of the patch
This update for OpenJDK 10.0.2 fixes the following security issues:
- CVE-2018-2940: the libraries sub-component contained an easily exploitable
vulnerability that allowed attackers to compromise Java SE or Java SE
Embedded over the network, potentially gaining unauthorized read access to
data that's accessible to the server. [bsc#1101645]
- CVE-2018-2952: the concurrency sub-component contained a difficult to exploit
vulnerability that allowed attackers to compromise Java SE, Java SE Embedded,
or JRockit over the network. This issue could have been abused to mount a
partial denial-of-service attack on the server. [bsc#1101651]
- CVE-2018-2972: the security sub-component contained a difficult to exploit
vulnerability that allowed attackers to compromise Java SE over the network,
potentially gaining unauthorized access to critical data or complete access
to all Java SE accessible data. [bsc#1101655)
- CVE-2018-2973: the JSSE sub-component contained a difficult to exploit
vulnerability allowed attackers to compromise Java SE or Java SE Embedded
over the network, potentially gaining the ability to create, delete or modify
critical data or all Java SE, Java SE Embedded accessible data without
authorization. [bsc#1101656]
Furthemore, the following bugs were fixed:
- Properly remove the existing alternative for java before reinstalling it.
[bsc#1096420]
- idlj was moved to the *-devel package. [bsc#1096420]
Patchnames
SUSE-SLE-Module-Basesystem-15-2018-1419
Terms of use
CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for java-10-openjdk",
"title": "Title of the patch"
},
{
"category": "description",
"text": "\nThis update for OpenJDK 10.0.2 fixes the following security issues:\n\n- CVE-2018-2940: the libraries sub-component contained an easily exploitable\n vulnerability that allowed attackers to compromise Java SE or Java SE\n Embedded over the network, potentially gaining unauthorized read access to\n data that\u0027s accessible to the server. [bsc#1101645]\n\n- CVE-2018-2952: the concurrency sub-component contained a difficult to exploit\n vulnerability that allowed attackers to compromise Java SE, Java SE Embedded,\n or JRockit over the network. This issue could have been abused to mount a\n partial denial-of-service attack on the server. [bsc#1101651]\n\n- CVE-2018-2972: the security sub-component contained a difficult to exploit\n vulnerability that allowed attackers to compromise Java SE over the network,\n potentially gaining unauthorized access to critical data or complete access\n to all Java SE accessible data. [bsc#1101655)\n\n- CVE-2018-2973: the JSSE sub-component contained a difficult to exploit\n vulnerability allowed attackers to compromise Java SE or Java SE Embedded\n over the network, potentially gaining the ability to create, delete or modify\n critical data or all Java SE, Java SE Embedded accessible data without\n authorization. [bsc#1101656]\n\nFurthemore, the following bugs were fixed:\n\n- Properly remove the existing alternative for java before reinstalling it.\n [bsc#1096420]\n\n- idlj was moved to the *-devel package. [bsc#1096420]\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "SUSE-SLE-Module-Basesystem-15-2018-1419",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2018_2083-1.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2018:2083-1",
"url": "https://www.suse.com/support/update/announcement/2018/suse-su-20182083-1/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2018:2083-1",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2018-July/004325.html"
},
{
"category": "self",
"summary": "SUSE Bug 1096420",
"url": "https://bugzilla.suse.com/1096420"
},
{
"category": "self",
"summary": "SUSE Bug 1101645",
"url": "https://bugzilla.suse.com/1101645"
},
{
"category": "self",
"summary": "SUSE Bug 1101651",
"url": "https://bugzilla.suse.com/1101651"
},
{
"category": "self",
"summary": "SUSE Bug 1101655",
"url": "https://bugzilla.suse.com/1101655"
},
{
"category": "self",
"summary": "SUSE Bug 1101656",
"url": "https://bugzilla.suse.com/1101656"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-2940 page",
"url": "https://www.suse.com/security/cve/CVE-2018-2940/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-2952 page",
"url": "https://www.suse.com/security/cve/CVE-2018-2952/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-2972 page",
"url": "https://www.suse.com/security/cve/CVE-2018-2972/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-2973 page",
"url": "https://www.suse.com/security/cve/CVE-2018-2973/"
}
],
"title": "Security update for java-10-openjdk",
"tracking": {
"current_release_date": "2018-07-27T12:39:37Z",
"generator": {
"date": "2018-07-27T12:39:37Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2018:2083-1",
"initial_release_date": "2018-07-27T12:39:37Z",
"revision_history": [
{
"date": "2018-07-27T12:39:37Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "java-10-openjdk-10.0.2.0-3.3.3.aarch64",
"product": {
"name": "java-10-openjdk-10.0.2.0-3.3.3.aarch64",
"product_id": "java-10-openjdk-10.0.2.0-3.3.3.aarch64"
}
},
{
"category": "product_version",
"name": "java-10-openjdk-demo-10.0.2.0-3.3.3.aarch64",
"product": {
"name": "java-10-openjdk-demo-10.0.2.0-3.3.3.aarch64",
"product_id": "java-10-openjdk-demo-10.0.2.0-3.3.3.aarch64"
}
},
{
"category": "product_version",
"name": "java-10-openjdk-devel-10.0.2.0-3.3.3.aarch64",
"product": {
"name": "java-10-openjdk-devel-10.0.2.0-3.3.3.aarch64",
"product_id": "java-10-openjdk-devel-10.0.2.0-3.3.3.aarch64"
}
},
{
"category": "product_version",
"name": "java-10-openjdk-headless-10.0.2.0-3.3.3.aarch64",
"product": {
"name": "java-10-openjdk-headless-10.0.2.0-3.3.3.aarch64",
"product_id": "java-10-openjdk-headless-10.0.2.0-3.3.3.aarch64"
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "java-10-openjdk-10.0.2.0-3.3.3.ppc64le",
"product": {
"name": "java-10-openjdk-10.0.2.0-3.3.3.ppc64le",
"product_id": "java-10-openjdk-10.0.2.0-3.3.3.ppc64le"
}
},
{
"category": "product_version",
"name": "java-10-openjdk-demo-10.0.2.0-3.3.3.ppc64le",
"product": {
"name": "java-10-openjdk-demo-10.0.2.0-3.3.3.ppc64le",
"product_id": "java-10-openjdk-demo-10.0.2.0-3.3.3.ppc64le"
}
},
{
"category": "product_version",
"name": "java-10-openjdk-devel-10.0.2.0-3.3.3.ppc64le",
"product": {
"name": "java-10-openjdk-devel-10.0.2.0-3.3.3.ppc64le",
"product_id": "java-10-openjdk-devel-10.0.2.0-3.3.3.ppc64le"
}
},
{
"category": "product_version",
"name": "java-10-openjdk-headless-10.0.2.0-3.3.3.ppc64le",
"product": {
"name": "java-10-openjdk-headless-10.0.2.0-3.3.3.ppc64le",
"product_id": "java-10-openjdk-headless-10.0.2.0-3.3.3.ppc64le"
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "java-10-openjdk-10.0.2.0-3.3.3.s390x",
"product": {
"name": "java-10-openjdk-10.0.2.0-3.3.3.s390x",
"product_id": "java-10-openjdk-10.0.2.0-3.3.3.s390x"
}
},
{
"category": "product_version",
"name": "java-10-openjdk-demo-10.0.2.0-3.3.3.s390x",
"product": {
"name": "java-10-openjdk-demo-10.0.2.0-3.3.3.s390x",
"product_id": "java-10-openjdk-demo-10.0.2.0-3.3.3.s390x"
}
},
{
"category": "product_version",
"name": "java-10-openjdk-devel-10.0.2.0-3.3.3.s390x",
"product": {
"name": "java-10-openjdk-devel-10.0.2.0-3.3.3.s390x",
"product_id": "java-10-openjdk-devel-10.0.2.0-3.3.3.s390x"
}
},
{
"category": "product_version",
"name": "java-10-openjdk-headless-10.0.2.0-3.3.3.s390x",
"product": {
"name": "java-10-openjdk-headless-10.0.2.0-3.3.3.s390x",
"product_id": "java-10-openjdk-headless-10.0.2.0-3.3.3.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "java-10-openjdk-10.0.2.0-3.3.3.x86_64",
"product": {
"name": "java-10-openjdk-10.0.2.0-3.3.3.x86_64",
"product_id": "java-10-openjdk-10.0.2.0-3.3.3.x86_64"
}
},
{
"category": "product_version",
"name": "java-10-openjdk-demo-10.0.2.0-3.3.3.x86_64",
"product": {
"name": "java-10-openjdk-demo-10.0.2.0-3.3.3.x86_64",
"product_id": "java-10-openjdk-demo-10.0.2.0-3.3.3.x86_64"
}
},
{
"category": "product_version",
"name": "java-10-openjdk-devel-10.0.2.0-3.3.3.x86_64",
"product": {
"name": "java-10-openjdk-devel-10.0.2.0-3.3.3.x86_64",
"product_id": "java-10-openjdk-devel-10.0.2.0-3.3.3.x86_64"
}
},
{
"category": "product_version",
"name": "java-10-openjdk-headless-10.0.2.0-3.3.3.x86_64",
"product": {
"name": "java-10-openjdk-headless-10.0.2.0-3.3.3.x86_64",
"product_id": "java-10-openjdk-headless-10.0.2.0-3.3.3.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux Enterprise Module for Basesystem 15",
"product": {
"name": "SUSE Linux Enterprise Module for Basesystem 15",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle-module-basesystem:15"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "java-10-openjdk-10.0.2.0-3.3.3.aarch64 as component of SUSE Linux Enterprise Module for Basesystem 15",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15:java-10-openjdk-10.0.2.0-3.3.3.aarch64"
},
"product_reference": "java-10-openjdk-10.0.2.0-3.3.3.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-10-openjdk-10.0.2.0-3.3.3.ppc64le as component of SUSE Linux Enterprise Module for Basesystem 15",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15:java-10-openjdk-10.0.2.0-3.3.3.ppc64le"
},
"product_reference": "java-10-openjdk-10.0.2.0-3.3.3.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-10-openjdk-10.0.2.0-3.3.3.s390x as component of SUSE Linux Enterprise Module for Basesystem 15",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15:java-10-openjdk-10.0.2.0-3.3.3.s390x"
},
"product_reference": "java-10-openjdk-10.0.2.0-3.3.3.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-10-openjdk-10.0.2.0-3.3.3.x86_64 as component of SUSE Linux Enterprise Module for Basesystem 15",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15:java-10-openjdk-10.0.2.0-3.3.3.x86_64"
},
"product_reference": "java-10-openjdk-10.0.2.0-3.3.3.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-10-openjdk-demo-10.0.2.0-3.3.3.aarch64 as component of SUSE Linux Enterprise Module for Basesystem 15",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15:java-10-openjdk-demo-10.0.2.0-3.3.3.aarch64"
},
"product_reference": "java-10-openjdk-demo-10.0.2.0-3.3.3.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-10-openjdk-demo-10.0.2.0-3.3.3.ppc64le as component of SUSE Linux Enterprise Module for Basesystem 15",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15:java-10-openjdk-demo-10.0.2.0-3.3.3.ppc64le"
},
"product_reference": "java-10-openjdk-demo-10.0.2.0-3.3.3.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-10-openjdk-demo-10.0.2.0-3.3.3.s390x as component of SUSE Linux Enterprise Module for Basesystem 15",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15:java-10-openjdk-demo-10.0.2.0-3.3.3.s390x"
},
"product_reference": "java-10-openjdk-demo-10.0.2.0-3.3.3.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-10-openjdk-demo-10.0.2.0-3.3.3.x86_64 as component of SUSE Linux Enterprise Module for Basesystem 15",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15:java-10-openjdk-demo-10.0.2.0-3.3.3.x86_64"
},
"product_reference": "java-10-openjdk-demo-10.0.2.0-3.3.3.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-10-openjdk-devel-10.0.2.0-3.3.3.aarch64 as component of SUSE Linux Enterprise Module for Basesystem 15",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15:java-10-openjdk-devel-10.0.2.0-3.3.3.aarch64"
},
"product_reference": "java-10-openjdk-devel-10.0.2.0-3.3.3.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-10-openjdk-devel-10.0.2.0-3.3.3.ppc64le as component of SUSE Linux Enterprise Module for Basesystem 15",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15:java-10-openjdk-devel-10.0.2.0-3.3.3.ppc64le"
},
"product_reference": "java-10-openjdk-devel-10.0.2.0-3.3.3.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-10-openjdk-devel-10.0.2.0-3.3.3.s390x as component of SUSE Linux Enterprise Module for Basesystem 15",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15:java-10-openjdk-devel-10.0.2.0-3.3.3.s390x"
},
"product_reference": "java-10-openjdk-devel-10.0.2.0-3.3.3.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-10-openjdk-devel-10.0.2.0-3.3.3.x86_64 as component of SUSE Linux Enterprise Module for Basesystem 15",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15:java-10-openjdk-devel-10.0.2.0-3.3.3.x86_64"
},
"product_reference": "java-10-openjdk-devel-10.0.2.0-3.3.3.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-10-openjdk-headless-10.0.2.0-3.3.3.aarch64 as component of SUSE Linux Enterprise Module for Basesystem 15",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15:java-10-openjdk-headless-10.0.2.0-3.3.3.aarch64"
},
"product_reference": "java-10-openjdk-headless-10.0.2.0-3.3.3.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-10-openjdk-headless-10.0.2.0-3.3.3.ppc64le as component of SUSE Linux Enterprise Module for Basesystem 15",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15:java-10-openjdk-headless-10.0.2.0-3.3.3.ppc64le"
},
"product_reference": "java-10-openjdk-headless-10.0.2.0-3.3.3.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-10-openjdk-headless-10.0.2.0-3.3.3.s390x as component of SUSE Linux Enterprise Module for Basesystem 15",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15:java-10-openjdk-headless-10.0.2.0-3.3.3.s390x"
},
"product_reference": "java-10-openjdk-headless-10.0.2.0-3.3.3.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-10-openjdk-headless-10.0.2.0-3.3.3.x86_64 as component of SUSE Linux Enterprise Module for Basesystem 15",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15:java-10-openjdk-headless-10.0.2.0-3.3.3.x86_64"
},
"product_reference": "java-10-openjdk-headless-10.0.2.0-3.3.3.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2018-2940",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-2940"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries). Supported versions that are affected are Java SE: 6u191, 7u181, 8u172 and 10.0.1; Java SE Embedded: 8u171. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 4.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Basesystem 15:java-10-openjdk-10.0.2.0-3.3.3.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:java-10-openjdk-10.0.2.0-3.3.3.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:java-10-openjdk-10.0.2.0-3.3.3.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:java-10-openjdk-10.0.2.0-3.3.3.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:java-10-openjdk-demo-10.0.2.0-3.3.3.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:java-10-openjdk-demo-10.0.2.0-3.3.3.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:java-10-openjdk-demo-10.0.2.0-3.3.3.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:java-10-openjdk-demo-10.0.2.0-3.3.3.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:java-10-openjdk-devel-10.0.2.0-3.3.3.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:java-10-openjdk-devel-10.0.2.0-3.3.3.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:java-10-openjdk-devel-10.0.2.0-3.3.3.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:java-10-openjdk-devel-10.0.2.0-3.3.3.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:java-10-openjdk-headless-10.0.2.0-3.3.3.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:java-10-openjdk-headless-10.0.2.0-3.3.3.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:java-10-openjdk-headless-10.0.2.0-3.3.3.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:java-10-openjdk-headless-10.0.2.0-3.3.3.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-2940",
"url": "https://www.suse.com/security/cve/CVE-2018-2940"
},
{
"category": "external",
"summary": "SUSE Bug 1101645 for CVE-2018-2940",
"url": "https://bugzilla.suse.com/1101645"
},
{
"category": "external",
"summary": "SUSE Bug 1101656 for CVE-2018-2940",
"url": "https://bugzilla.suse.com/1101656"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Basesystem 15:java-10-openjdk-10.0.2.0-3.3.3.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:java-10-openjdk-10.0.2.0-3.3.3.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:java-10-openjdk-10.0.2.0-3.3.3.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:java-10-openjdk-10.0.2.0-3.3.3.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:java-10-openjdk-demo-10.0.2.0-3.3.3.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:java-10-openjdk-demo-10.0.2.0-3.3.3.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:java-10-openjdk-demo-10.0.2.0-3.3.3.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:java-10-openjdk-demo-10.0.2.0-3.3.3.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:java-10-openjdk-devel-10.0.2.0-3.3.3.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:java-10-openjdk-devel-10.0.2.0-3.3.3.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:java-10-openjdk-devel-10.0.2.0-3.3.3.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:java-10-openjdk-devel-10.0.2.0-3.3.3.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:java-10-openjdk-headless-10.0.2.0-3.3.3.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:java-10-openjdk-headless-10.0.2.0-3.3.3.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:java-10-openjdk-headless-10.0.2.0-3.3.3.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:java-10-openjdk-headless-10.0.2.0-3.3.3.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Module for Basesystem 15:java-10-openjdk-10.0.2.0-3.3.3.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:java-10-openjdk-10.0.2.0-3.3.3.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:java-10-openjdk-10.0.2.0-3.3.3.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:java-10-openjdk-10.0.2.0-3.3.3.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:java-10-openjdk-demo-10.0.2.0-3.3.3.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:java-10-openjdk-demo-10.0.2.0-3.3.3.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:java-10-openjdk-demo-10.0.2.0-3.3.3.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:java-10-openjdk-demo-10.0.2.0-3.3.3.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:java-10-openjdk-devel-10.0.2.0-3.3.3.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:java-10-openjdk-devel-10.0.2.0-3.3.3.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:java-10-openjdk-devel-10.0.2.0-3.3.3.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:java-10-openjdk-devel-10.0.2.0-3.3.3.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:java-10-openjdk-headless-10.0.2.0-3.3.3.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:java-10-openjdk-headless-10.0.2.0-3.3.3.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:java-10-openjdk-headless-10.0.2.0-3.3.3.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:java-10-openjdk-headless-10.0.2.0-3.3.3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-07-27T12:39:37Z",
"details": "moderate"
}
],
"title": "CVE-2018-2940"
},
{
"cve": "CVE-2018-2952",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-2952"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Concurrency). Supported versions that are affected are Java SE: 6u191, 7u181, 8u172 and 10.0.1; Java SE Embedded: 8u171; JRockit: R28.3.18. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 3.7 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Basesystem 15:java-10-openjdk-10.0.2.0-3.3.3.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:java-10-openjdk-10.0.2.0-3.3.3.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:java-10-openjdk-10.0.2.0-3.3.3.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:java-10-openjdk-10.0.2.0-3.3.3.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:java-10-openjdk-demo-10.0.2.0-3.3.3.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:java-10-openjdk-demo-10.0.2.0-3.3.3.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:java-10-openjdk-demo-10.0.2.0-3.3.3.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:java-10-openjdk-demo-10.0.2.0-3.3.3.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:java-10-openjdk-devel-10.0.2.0-3.3.3.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:java-10-openjdk-devel-10.0.2.0-3.3.3.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:java-10-openjdk-devel-10.0.2.0-3.3.3.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:java-10-openjdk-devel-10.0.2.0-3.3.3.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:java-10-openjdk-headless-10.0.2.0-3.3.3.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:java-10-openjdk-headless-10.0.2.0-3.3.3.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:java-10-openjdk-headless-10.0.2.0-3.3.3.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:java-10-openjdk-headless-10.0.2.0-3.3.3.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-2952",
"url": "https://www.suse.com/security/cve/CVE-2018-2952"
},
{
"category": "external",
"summary": "SUSE Bug 1101645 for CVE-2018-2952",
"url": "https://bugzilla.suse.com/1101645"
},
{
"category": "external",
"summary": "SUSE Bug 1101651 for CVE-2018-2952",
"url": "https://bugzilla.suse.com/1101651"
},
{
"category": "external",
"summary": "SUSE Bug 1101656 for CVE-2018-2952",
"url": "https://bugzilla.suse.com/1101656"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Basesystem 15:java-10-openjdk-10.0.2.0-3.3.3.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:java-10-openjdk-10.0.2.0-3.3.3.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:java-10-openjdk-10.0.2.0-3.3.3.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:java-10-openjdk-10.0.2.0-3.3.3.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:java-10-openjdk-demo-10.0.2.0-3.3.3.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:java-10-openjdk-demo-10.0.2.0-3.3.3.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:java-10-openjdk-demo-10.0.2.0-3.3.3.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:java-10-openjdk-demo-10.0.2.0-3.3.3.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:java-10-openjdk-devel-10.0.2.0-3.3.3.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:java-10-openjdk-devel-10.0.2.0-3.3.3.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:java-10-openjdk-devel-10.0.2.0-3.3.3.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:java-10-openjdk-devel-10.0.2.0-3.3.3.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:java-10-openjdk-headless-10.0.2.0-3.3.3.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:java-10-openjdk-headless-10.0.2.0-3.3.3.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:java-10-openjdk-headless-10.0.2.0-3.3.3.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:java-10-openjdk-headless-10.0.2.0-3.3.3.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Module for Basesystem 15:java-10-openjdk-10.0.2.0-3.3.3.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:java-10-openjdk-10.0.2.0-3.3.3.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:java-10-openjdk-10.0.2.0-3.3.3.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:java-10-openjdk-10.0.2.0-3.3.3.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:java-10-openjdk-demo-10.0.2.0-3.3.3.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:java-10-openjdk-demo-10.0.2.0-3.3.3.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:java-10-openjdk-demo-10.0.2.0-3.3.3.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:java-10-openjdk-demo-10.0.2.0-3.3.3.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:java-10-openjdk-devel-10.0.2.0-3.3.3.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:java-10-openjdk-devel-10.0.2.0-3.3.3.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:java-10-openjdk-devel-10.0.2.0-3.3.3.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:java-10-openjdk-devel-10.0.2.0-3.3.3.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:java-10-openjdk-headless-10.0.2.0-3.3.3.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:java-10-openjdk-headless-10.0.2.0-3.3.3.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:java-10-openjdk-headless-10.0.2.0-3.3.3.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:java-10-openjdk-headless-10.0.2.0-3.3.3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-07-27T12:39:37Z",
"details": "important"
}
],
"title": "CVE-2018-2952"
},
{
"cve": "CVE-2018-2972",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-2972"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Security). The supported version that is affected is Java SE: 10.0.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Java SE accessible data. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 5.9 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Basesystem 15:java-10-openjdk-10.0.2.0-3.3.3.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:java-10-openjdk-10.0.2.0-3.3.3.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:java-10-openjdk-10.0.2.0-3.3.3.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:java-10-openjdk-10.0.2.0-3.3.3.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:java-10-openjdk-demo-10.0.2.0-3.3.3.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:java-10-openjdk-demo-10.0.2.0-3.3.3.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:java-10-openjdk-demo-10.0.2.0-3.3.3.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:java-10-openjdk-demo-10.0.2.0-3.3.3.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:java-10-openjdk-devel-10.0.2.0-3.3.3.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:java-10-openjdk-devel-10.0.2.0-3.3.3.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:java-10-openjdk-devel-10.0.2.0-3.3.3.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:java-10-openjdk-devel-10.0.2.0-3.3.3.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:java-10-openjdk-headless-10.0.2.0-3.3.3.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:java-10-openjdk-headless-10.0.2.0-3.3.3.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:java-10-openjdk-headless-10.0.2.0-3.3.3.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:java-10-openjdk-headless-10.0.2.0-3.3.3.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-2972",
"url": "https://www.suse.com/security/cve/CVE-2018-2972"
},
{
"category": "external",
"summary": "SUSE Bug 1101655 for CVE-2018-2972",
"url": "https://bugzilla.suse.com/1101655"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Basesystem 15:java-10-openjdk-10.0.2.0-3.3.3.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:java-10-openjdk-10.0.2.0-3.3.3.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:java-10-openjdk-10.0.2.0-3.3.3.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:java-10-openjdk-10.0.2.0-3.3.3.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:java-10-openjdk-demo-10.0.2.0-3.3.3.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:java-10-openjdk-demo-10.0.2.0-3.3.3.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:java-10-openjdk-demo-10.0.2.0-3.3.3.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:java-10-openjdk-demo-10.0.2.0-3.3.3.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:java-10-openjdk-devel-10.0.2.0-3.3.3.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:java-10-openjdk-devel-10.0.2.0-3.3.3.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:java-10-openjdk-devel-10.0.2.0-3.3.3.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:java-10-openjdk-devel-10.0.2.0-3.3.3.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:java-10-openjdk-headless-10.0.2.0-3.3.3.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:java-10-openjdk-headless-10.0.2.0-3.3.3.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:java-10-openjdk-headless-10.0.2.0-3.3.3.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:java-10-openjdk-headless-10.0.2.0-3.3.3.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Module for Basesystem 15:java-10-openjdk-10.0.2.0-3.3.3.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:java-10-openjdk-10.0.2.0-3.3.3.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:java-10-openjdk-10.0.2.0-3.3.3.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:java-10-openjdk-10.0.2.0-3.3.3.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:java-10-openjdk-demo-10.0.2.0-3.3.3.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:java-10-openjdk-demo-10.0.2.0-3.3.3.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:java-10-openjdk-demo-10.0.2.0-3.3.3.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:java-10-openjdk-demo-10.0.2.0-3.3.3.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:java-10-openjdk-devel-10.0.2.0-3.3.3.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:java-10-openjdk-devel-10.0.2.0-3.3.3.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:java-10-openjdk-devel-10.0.2.0-3.3.3.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:java-10-openjdk-devel-10.0.2.0-3.3.3.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:java-10-openjdk-headless-10.0.2.0-3.3.3.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:java-10-openjdk-headless-10.0.2.0-3.3.3.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:java-10-openjdk-headless-10.0.2.0-3.3.3.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:java-10-openjdk-headless-10.0.2.0-3.3.3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-07-27T12:39:37Z",
"details": "moderate"
}
],
"title": "CVE-2018-2972"
},
{
"cve": "CVE-2018-2973",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-2973"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: JSSE). Supported versions that are affected are Java SE: 6u191, 7u181, 8u172 and 10.0.1; Java SE Embedded: 8u171. Difficult to exploit vulnerability allows unauthenticated attacker with network access via SSL/TLS to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 5.9 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Basesystem 15:java-10-openjdk-10.0.2.0-3.3.3.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:java-10-openjdk-10.0.2.0-3.3.3.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:java-10-openjdk-10.0.2.0-3.3.3.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:java-10-openjdk-10.0.2.0-3.3.3.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:java-10-openjdk-demo-10.0.2.0-3.3.3.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:java-10-openjdk-demo-10.0.2.0-3.3.3.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:java-10-openjdk-demo-10.0.2.0-3.3.3.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:java-10-openjdk-demo-10.0.2.0-3.3.3.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:java-10-openjdk-devel-10.0.2.0-3.3.3.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:java-10-openjdk-devel-10.0.2.0-3.3.3.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:java-10-openjdk-devel-10.0.2.0-3.3.3.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:java-10-openjdk-devel-10.0.2.0-3.3.3.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:java-10-openjdk-headless-10.0.2.0-3.3.3.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:java-10-openjdk-headless-10.0.2.0-3.3.3.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:java-10-openjdk-headless-10.0.2.0-3.3.3.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:java-10-openjdk-headless-10.0.2.0-3.3.3.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-2973",
"url": "https://www.suse.com/security/cve/CVE-2018-2973"
},
{
"category": "external",
"summary": "SUSE Bug 1101645 for CVE-2018-2973",
"url": "https://bugzilla.suse.com/1101645"
},
{
"category": "external",
"summary": "SUSE Bug 1101656 for CVE-2018-2973",
"url": "https://bugzilla.suse.com/1101656"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Basesystem 15:java-10-openjdk-10.0.2.0-3.3.3.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:java-10-openjdk-10.0.2.0-3.3.3.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:java-10-openjdk-10.0.2.0-3.3.3.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:java-10-openjdk-10.0.2.0-3.3.3.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:java-10-openjdk-demo-10.0.2.0-3.3.3.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:java-10-openjdk-demo-10.0.2.0-3.3.3.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:java-10-openjdk-demo-10.0.2.0-3.3.3.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:java-10-openjdk-demo-10.0.2.0-3.3.3.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:java-10-openjdk-devel-10.0.2.0-3.3.3.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:java-10-openjdk-devel-10.0.2.0-3.3.3.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:java-10-openjdk-devel-10.0.2.0-3.3.3.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:java-10-openjdk-devel-10.0.2.0-3.3.3.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:java-10-openjdk-headless-10.0.2.0-3.3.3.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:java-10-openjdk-headless-10.0.2.0-3.3.3.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:java-10-openjdk-headless-10.0.2.0-3.3.3.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:java-10-openjdk-headless-10.0.2.0-3.3.3.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Module for Basesystem 15:java-10-openjdk-10.0.2.0-3.3.3.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:java-10-openjdk-10.0.2.0-3.3.3.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:java-10-openjdk-10.0.2.0-3.3.3.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:java-10-openjdk-10.0.2.0-3.3.3.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:java-10-openjdk-demo-10.0.2.0-3.3.3.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:java-10-openjdk-demo-10.0.2.0-3.3.3.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:java-10-openjdk-demo-10.0.2.0-3.3.3.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:java-10-openjdk-demo-10.0.2.0-3.3.3.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:java-10-openjdk-devel-10.0.2.0-3.3.3.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:java-10-openjdk-devel-10.0.2.0-3.3.3.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:java-10-openjdk-devel-10.0.2.0-3.3.3.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:java-10-openjdk-devel-10.0.2.0-3.3.3.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:java-10-openjdk-headless-10.0.2.0-3.3.3.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:java-10-openjdk-headless-10.0.2.0-3.3.3.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:java-10-openjdk-headless-10.0.2.0-3.3.3.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:java-10-openjdk-headless-10.0.2.0-3.3.3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-07-27T12:39:37Z",
"details": "moderate"
}
],
"title": "CVE-2018-2973"
}
]
}
suse-su-2018:2649-2
Vulnerability from csaf_suse
Published
2018-10-18 12:50
Modified
2018-10-18 12:50
Summary
Security update for java-1_7_1-ibm
Notes
Title of the patch
Security update for java-1_7_1-ibm
Description of the patch
This update for java-1_7_1-ibm fixes the following issues:
Security issues fixed:
- CVE-2018-1517: Fixed a flaw in the java.math component in IBM SDK, which may
allow an attacker to inflict a denial-of-service attack with specially
crafted String data.
- CVE-2018-1656: Protect against path traversal attacks when extracting
compressed dump files.
- CVE-2018-2940: Fixed an easily exploitable vulnerability in the libraries
subcomponent, which allowed unauthenticated attackers with network access
via multiple protocols to compromise the Java SE, leading to
unauthorized read access.
- CVE-2018-2952: Fixed an easily exploitable vulnerability in the concurrency
subcomponent, which allowed unauthenticated attackers with network access
via multiple protocols to compromise the Java SE, leading to denial of
service.
- CVE-2018-2973: Fixed a difficult to exploit vulnerability in the JSSE
subcomponent, which allowed unauthenticated attackers with network access
via SSL/TLS to compromise the Java SE, leading to unauthorized creation,
deletion or modification access to critical data.
- CVE-2018-12539: Fixed a vulnerability in which users other than the process
owner may be able to use Java Attach API to connect to the IBM JVM on the
same machine and use Attach API operations, including the ability to execute
untrusted arbitrary code.
Other changes made:
- Various JIT/JVM crash fixes
- Version update to 7.1.4.30 (bsc#1104668)
You can find detailed information about this update [here](https://developer.ibm.com/javasdk/support/security-vulnerabilities/#IBM_Security_Update_August_2018).
Patchnames
SUSE-SLE-SERVER-12-SP2-BCL-2018-1858
Terms of use
CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for java-1_7_1-ibm",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This update for java-1_7_1-ibm fixes the following issues:\n\nSecurity issues fixed:\n \n- CVE-2018-1517: Fixed a flaw in the java.math component in IBM SDK, which may\n allow an attacker to inflict a denial-of-service attack with specially\n crafted String data.\n- CVE-2018-1656: Protect against path traversal attacks when extracting\n compressed dump files.\n- CVE-2018-2940: Fixed an easily exploitable vulnerability in the libraries\n subcomponent, which allowed unauthenticated attackers with network access\n via multiple protocols to compromise the Java SE, leading to\n unauthorized read access.\n- CVE-2018-2952: Fixed an easily exploitable vulnerability in the concurrency\n subcomponent, which allowed unauthenticated attackers with network access\n via multiple protocols to compromise the Java SE, leading to denial of\n service.\n- CVE-2018-2973: Fixed a difficult to exploit vulnerability in the JSSE\n subcomponent, which allowed unauthenticated attackers with network access\n via SSL/TLS to compromise the Java SE, leading to unauthorized creation,\n deletion or modification access to critical data.\n- CVE-2018-12539: Fixed a vulnerability in which users other than the process\n owner may be able to use Java Attach API to connect to the IBM JVM on the\n same machine and use Attach API operations, including the ability to execute\n untrusted arbitrary code.\n\nOther changes made:\n\n- Various JIT/JVM crash fixes\n- Version update to 7.1.4.30 (bsc#1104668)\n\nYou can find detailed information about this update [here](https://developer.ibm.com/javasdk/support/security-vulnerabilities/#IBM_Security_Update_August_2018).\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "SUSE-SLE-SERVER-12-SP2-BCL-2018-1858",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2018_2649-2.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2018:2649-2",
"url": "https://www.suse.com/support/update/announcement/2018/suse-su-20182649-2/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2018:2649-2",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2018-October/004712.html"
},
{
"category": "self",
"summary": "SUSE Bug 1104668",
"url": "https://bugzilla.suse.com/1104668"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-12539 page",
"url": "https://www.suse.com/security/cve/CVE-2018-12539/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-1517 page",
"url": "https://www.suse.com/security/cve/CVE-2018-1517/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-1656 page",
"url": "https://www.suse.com/security/cve/CVE-2018-1656/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-2940 page",
"url": "https://www.suse.com/security/cve/CVE-2018-2940/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-2952 page",
"url": "https://www.suse.com/security/cve/CVE-2018-2952/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-2973 page",
"url": "https://www.suse.com/security/cve/CVE-2018-2973/"
}
],
"title": "Security update for java-1_7_1-ibm",
"tracking": {
"current_release_date": "2018-10-18T12:50:39Z",
"generator": {
"date": "2018-10-18T12:50:39Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2018:2649-2",
"initial_release_date": "2018-10-18T12:50:39Z",
"revision_history": [
{
"date": "2018-10-18T12:50:39Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.x86_64",
"product": {
"name": "java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.x86_64",
"product_id": "java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.x86_64"
}
},
{
"category": "product_version",
"name": "java-1_7_1-ibm-alsa-1.7.1_sr4.30-38.26.1.x86_64",
"product": {
"name": "java-1_7_1-ibm-alsa-1.7.1_sr4.30-38.26.1.x86_64",
"product_id": "java-1_7_1-ibm-alsa-1.7.1_sr4.30-38.26.1.x86_64"
}
},
{
"category": "product_version",
"name": "java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.x86_64",
"product": {
"name": "java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.x86_64",
"product_id": "java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.x86_64"
}
},
{
"category": "product_version",
"name": "java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.x86_64",
"product": {
"name": "java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.x86_64",
"product_id": "java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.x86_64"
}
},
{
"category": "product_version",
"name": "java-1_7_1-ibm-plugin-1.7.1_sr4.30-38.26.1.x86_64",
"product": {
"name": "java-1_7_1-ibm-plugin-1.7.1_sr4.30-38.26.1.x86_64",
"product_id": "java-1_7_1-ibm-plugin-1.7.1_sr4.30-38.26.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 12 SP2-BCL",
"product": {
"name": "SUSE Linux Enterprise Server 12 SP2-BCL",
"product_id": "SUSE Linux Enterprise Server 12 SP2-BCL",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles-bcl:12:sp2"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP2-BCL",
"product_id": "SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.x86_64"
},
"product_reference": "java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2-BCL"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-alsa-1.7.1_sr4.30-38.26.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP2-BCL",
"product_id": "SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-alsa-1.7.1_sr4.30-38.26.1.x86_64"
},
"product_reference": "java-1_7_1-ibm-alsa-1.7.1_sr4.30-38.26.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2-BCL"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP2-BCL",
"product_id": "SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.x86_64"
},
"product_reference": "java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2-BCL"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP2-BCL",
"product_id": "SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.x86_64"
},
"product_reference": "java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2-BCL"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-plugin-1.7.1_sr4.30-38.26.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP2-BCL",
"product_id": "SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-plugin-1.7.1_sr4.30-38.26.1.x86_64"
},
"product_reference": "java-1_7_1-ibm-plugin-1.7.1_sr4.30-38.26.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2-BCL"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2018-12539",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-12539"
}
],
"notes": [
{
"category": "general",
"text": "In Eclipse OpenJ9 version 0.8, users other than the process owner may be able to use Java Attach API to connect to an Eclipse OpenJ9 or IBM JVM on the same machine and use Attach API operations, which includes the ability to execute untrusted native code. Attach API is enabled by default on Windows, Linux and AIX JVMs and can be disabled using the command line option -Dcom.ibm.tools.attach.enable=no.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-alsa-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-plugin-1.7.1_sr4.30-38.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-12539",
"url": "https://www.suse.com/security/cve/CVE-2018-12539"
},
{
"category": "external",
"summary": "SUSE Bug 1101645 for CVE-2018-12539",
"url": "https://bugzilla.suse.com/1101645"
},
{
"category": "external",
"summary": "SUSE Bug 1101656 for CVE-2018-12539",
"url": "https://bugzilla.suse.com/1101656"
},
{
"category": "external",
"summary": "SUSE Bug 1104668 for CVE-2018-12539",
"url": "https://bugzilla.suse.com/1104668"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-alsa-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-plugin-1.7.1_sr4.30-38.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.4,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-alsa-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-plugin-1.7.1_sr4.30-38.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-10-18T12:50:39Z",
"details": "moderate"
}
],
"title": "CVE-2018-12539"
},
{
"cve": "CVE-2018-1517",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-1517"
}
],
"notes": [
{
"category": "general",
"text": "A flaw in the java.math component in IBM SDK, Java Technology Edition 6.0, 7.0, and 8.0 may allow an attacker to inflict a denial-of-service attack with specially crafted String data. IBM X-Force ID: 141681.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-alsa-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-plugin-1.7.1_sr4.30-38.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-1517",
"url": "https://www.suse.com/security/cve/CVE-2018-1517"
},
{
"category": "external",
"summary": "SUSE Bug 1101645 for CVE-2018-1517",
"url": "https://bugzilla.suse.com/1101645"
},
{
"category": "external",
"summary": "SUSE Bug 1101656 for CVE-2018-1517",
"url": "https://bugzilla.suse.com/1101656"
},
{
"category": "external",
"summary": "SUSE Bug 1104668 for CVE-2018-1517",
"url": "https://bugzilla.suse.com/1104668"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-alsa-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-plugin-1.7.1_sr4.30-38.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-alsa-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-plugin-1.7.1_sr4.30-38.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-10-18T12:50:39Z",
"details": "moderate"
}
],
"title": "CVE-2018-1517"
},
{
"cve": "CVE-2018-1656",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-1656"
}
],
"notes": [
{
"category": "general",
"text": "The IBM Java Runtime Environment\u0027s Diagnostic Tooling Framework for Java (DTFJ) (IBM SDK, Java Technology Edition 6.0 , 7.0, and 8.0) does not protect against path traversal attacks when extracting compressed dump files. IBM X-Force ID: 144882.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-alsa-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-plugin-1.7.1_sr4.30-38.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-1656",
"url": "https://www.suse.com/security/cve/CVE-2018-1656"
},
{
"category": "external",
"summary": "SUSE Bug 1101645 for CVE-2018-1656",
"url": "https://bugzilla.suse.com/1101645"
},
{
"category": "external",
"summary": "SUSE Bug 1101656 for CVE-2018-1656",
"url": "https://bugzilla.suse.com/1101656"
},
{
"category": "external",
"summary": "SUSE Bug 1104668 for CVE-2018-1656",
"url": "https://bugzilla.suse.com/1104668"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-alsa-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-plugin-1.7.1_sr4.30-38.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.4,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:N",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-alsa-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-plugin-1.7.1_sr4.30-38.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-10-18T12:50:39Z",
"details": "moderate"
}
],
"title": "CVE-2018-1656"
},
{
"cve": "CVE-2018-2940",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-2940"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries). Supported versions that are affected are Java SE: 6u191, 7u181, 8u172 and 10.0.1; Java SE Embedded: 8u171. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 4.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-alsa-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-plugin-1.7.1_sr4.30-38.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-2940",
"url": "https://www.suse.com/security/cve/CVE-2018-2940"
},
{
"category": "external",
"summary": "SUSE Bug 1101645 for CVE-2018-2940",
"url": "https://bugzilla.suse.com/1101645"
},
{
"category": "external",
"summary": "SUSE Bug 1101656 for CVE-2018-2940",
"url": "https://bugzilla.suse.com/1101656"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-alsa-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-plugin-1.7.1_sr4.30-38.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-alsa-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-plugin-1.7.1_sr4.30-38.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-10-18T12:50:39Z",
"details": "moderate"
}
],
"title": "CVE-2018-2940"
},
{
"cve": "CVE-2018-2952",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-2952"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Concurrency). Supported versions that are affected are Java SE: 6u191, 7u181, 8u172 and 10.0.1; Java SE Embedded: 8u171; JRockit: R28.3.18. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 3.7 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-alsa-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-plugin-1.7.1_sr4.30-38.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-2952",
"url": "https://www.suse.com/security/cve/CVE-2018-2952"
},
{
"category": "external",
"summary": "SUSE Bug 1101645 for CVE-2018-2952",
"url": "https://bugzilla.suse.com/1101645"
},
{
"category": "external",
"summary": "SUSE Bug 1101651 for CVE-2018-2952",
"url": "https://bugzilla.suse.com/1101651"
},
{
"category": "external",
"summary": "SUSE Bug 1101656 for CVE-2018-2952",
"url": "https://bugzilla.suse.com/1101656"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-alsa-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-plugin-1.7.1_sr4.30-38.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-alsa-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-plugin-1.7.1_sr4.30-38.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-10-18T12:50:39Z",
"details": "important"
}
],
"title": "CVE-2018-2952"
},
{
"cve": "CVE-2018-2973",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-2973"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: JSSE). Supported versions that are affected are Java SE: 6u191, 7u181, 8u172 and 10.0.1; Java SE Embedded: 8u171. Difficult to exploit vulnerability allows unauthenticated attacker with network access via SSL/TLS to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 5.9 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-alsa-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-plugin-1.7.1_sr4.30-38.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-2973",
"url": "https://www.suse.com/security/cve/CVE-2018-2973"
},
{
"category": "external",
"summary": "SUSE Bug 1101645 for CVE-2018-2973",
"url": "https://bugzilla.suse.com/1101645"
},
{
"category": "external",
"summary": "SUSE Bug 1101656 for CVE-2018-2973",
"url": "https://bugzilla.suse.com/1101656"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-alsa-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-plugin-1.7.1_sr4.30-38.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-alsa-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-plugin-1.7.1_sr4.30-38.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-10-18T12:50:39Z",
"details": "moderate"
}
],
"title": "CVE-2018-2973"
}
]
}
suse-su-2018:2649-1
Vulnerability from csaf_suse
Published
2018-09-07 11:42
Modified
2018-09-07 11:42
Summary
Security update for java-1_7_1-ibm
Notes
Title of the patch
Security update for java-1_7_1-ibm
Description of the patch
This update for java-1_7_1-ibm fixes the following issues:
Security issues fixed:
- CVE-2018-1517: Fixed a flaw in the java.math component in IBM SDK, which may
allow an attacker to inflict a denial-of-service attack with specially
crafted String data.
- CVE-2018-1656: Protect against path traversal attacks when extracting
compressed dump files.
- CVE-2018-2940: Fixed an easily exploitable vulnerability in the libraries
subcomponent, which allowed unauthenticated attackers with network access
via multiple protocols to compromise the Java SE, leading to
unauthorized read access.
- CVE-2018-2952: Fixed an easily exploitable vulnerability in the concurrency
subcomponent, which allowed unauthenticated attackers with network access
via multiple protocols to compromise the Java SE, leading to denial of
service.
- CVE-2018-2973: Fixed a difficult to exploit vulnerability in the JSSE
subcomponent, which allowed unauthenticated attackers with network access
via SSL/TLS to compromise the Java SE, leading to unauthorized creation,
deletion or modification access to critical data.
- CVE-2018-12539: Fixed a vulnerability in which users other than the process
owner may be able to use Java Attach API to connect to the IBM JVM on the
same machine and use Attach API operations, including the ability to execute
untrusted arbitrary code.
Other changes made:
- Various JIT/JVM crash fixes
- Version update to 7.1.4.30 (bsc#1104668)
You can find detailed information about this update [here](https://developer.ibm.com/javasdk/support/security-vulnerabilities/#IBM_Security_Update_August_2018).
Patchnames
SUSE-OpenStack-Cloud-7-2018-1858,SUSE-SLE-SAP-12-SP1-2018-1858,SUSE-SLE-SAP-12-SP2-2018-1858,SUSE-SLE-SDK-12-SP3-2018-1858,SUSE-SLE-SERVER-12-2018-1858,SUSE-SLE-SERVER-12-SP1-2018-1858,SUSE-SLE-SERVER-12-SP2-2018-1858,SUSE-SLE-SERVER-12-SP3-2018-1858,SUSE-Storage-4-2018-1858
Terms of use
CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for java-1_7_1-ibm",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This update for java-1_7_1-ibm fixes the following issues:\n\nSecurity issues fixed:\n \n- CVE-2018-1517: Fixed a flaw in the java.math component in IBM SDK, which may\n allow an attacker to inflict a denial-of-service attack with specially\n crafted String data.\n- CVE-2018-1656: Protect against path traversal attacks when extracting\n compressed dump files.\n- CVE-2018-2940: Fixed an easily exploitable vulnerability in the libraries\n subcomponent, which allowed unauthenticated attackers with network access\n via multiple protocols to compromise the Java SE, leading to\n unauthorized read access.\n- CVE-2018-2952: Fixed an easily exploitable vulnerability in the concurrency\n subcomponent, which allowed unauthenticated attackers with network access\n via multiple protocols to compromise the Java SE, leading to denial of\n service.\n- CVE-2018-2973: Fixed a difficult to exploit vulnerability in the JSSE\n subcomponent, which allowed unauthenticated attackers with network access\n via SSL/TLS to compromise the Java SE, leading to unauthorized creation,\n deletion or modification access to critical data.\n- CVE-2018-12539: Fixed a vulnerability in which users other than the process\n owner may be able to use Java Attach API to connect to the IBM JVM on the\n same machine and use Attach API operations, including the ability to execute\n untrusted arbitrary code.\n\nOther changes made:\n\n- Various JIT/JVM crash fixes\n- Version update to 7.1.4.30 (bsc#1104668)\n\nYou can find detailed information about this update [here](https://developer.ibm.com/javasdk/support/security-vulnerabilities/#IBM_Security_Update_August_2018).\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "SUSE-OpenStack-Cloud-7-2018-1858,SUSE-SLE-SAP-12-SP1-2018-1858,SUSE-SLE-SAP-12-SP2-2018-1858,SUSE-SLE-SDK-12-SP3-2018-1858,SUSE-SLE-SERVER-12-2018-1858,SUSE-SLE-SERVER-12-SP1-2018-1858,SUSE-SLE-SERVER-12-SP2-2018-1858,SUSE-SLE-SERVER-12-SP3-2018-1858,SUSE-Storage-4-2018-1858",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2018_2649-1.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2018:2649-1",
"url": "https://www.suse.com/support/update/announcement/2018/suse-su-20182649-1/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2018:2649-1",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2018-September/004541.html"
},
{
"category": "self",
"summary": "SUSE Bug 1104668",
"url": "https://bugzilla.suse.com/1104668"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-12539 page",
"url": "https://www.suse.com/security/cve/CVE-2018-12539/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-1517 page",
"url": "https://www.suse.com/security/cve/CVE-2018-1517/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-1656 page",
"url": "https://www.suse.com/security/cve/CVE-2018-1656/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-2940 page",
"url": "https://www.suse.com/security/cve/CVE-2018-2940/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-2952 page",
"url": "https://www.suse.com/security/cve/CVE-2018-2952/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-2973 page",
"url": "https://www.suse.com/security/cve/CVE-2018-2973/"
}
],
"title": "Security update for java-1_7_1-ibm",
"tracking": {
"current_release_date": "2018-09-07T11:42:39Z",
"generator": {
"date": "2018-09-07T11:42:39Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2018:2649-1",
"initial_release_date": "2018-09-07T11:42:39Z",
"revision_history": [
{
"date": "2018-09-07T11:42:39Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.ppc64le",
"product": {
"name": "java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.ppc64le",
"product_id": "java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.ppc64le"
}
},
{
"category": "product_version",
"name": "java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.ppc64le",
"product": {
"name": "java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.ppc64le",
"product_id": "java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.ppc64le"
}
},
{
"category": "product_version",
"name": "java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.ppc64le",
"product": {
"name": "java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.ppc64le",
"product_id": "java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.ppc64le"
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.s390x",
"product": {
"name": "java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.s390x",
"product_id": "java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.s390x"
}
},
{
"category": "product_version",
"name": "java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.s390x",
"product": {
"name": "java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.s390x",
"product_id": "java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.s390x"
}
},
{
"category": "product_version",
"name": "java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.s390x",
"product": {
"name": "java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.s390x",
"product_id": "java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.x86_64",
"product": {
"name": "java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.x86_64",
"product_id": "java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.x86_64"
}
},
{
"category": "product_version",
"name": "java-1_7_1-ibm-alsa-1.7.1_sr4.30-38.26.1.x86_64",
"product": {
"name": "java-1_7_1-ibm-alsa-1.7.1_sr4.30-38.26.1.x86_64",
"product_id": "java-1_7_1-ibm-alsa-1.7.1_sr4.30-38.26.1.x86_64"
}
},
{
"category": "product_version",
"name": "java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.x86_64",
"product": {
"name": "java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.x86_64",
"product_id": "java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.x86_64"
}
},
{
"category": "product_version",
"name": "java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.x86_64",
"product": {
"name": "java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.x86_64",
"product_id": "java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.x86_64"
}
},
{
"category": "product_version",
"name": "java-1_7_1-ibm-plugin-1.7.1_sr4.30-38.26.1.x86_64",
"product": {
"name": "java-1_7_1-ibm-plugin-1.7.1_sr4.30-38.26.1.x86_64",
"product_id": "java-1_7_1-ibm-plugin-1.7.1_sr4.30-38.26.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE OpenStack Cloud 7",
"product": {
"name": "SUSE OpenStack Cloud 7",
"product_id": "SUSE OpenStack Cloud 7",
"product_identification_helper": {
"cpe": "cpe:/o:suse:suse-openstack-cloud:7"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server for SAP Applications 12 SP1",
"product": {
"name": "SUSE Linux Enterprise Server for SAP Applications 12 SP1",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles_sap:12:sp1"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server for SAP Applications 12 SP2",
"product": {
"name": "SUSE Linux Enterprise Server for SAP Applications 12 SP2",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP2",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles_sap:12:sp2"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Software Development Kit 12 SP3",
"product": {
"name": "SUSE Linux Enterprise Software Development Kit 12 SP3",
"product_id": "SUSE Linux Enterprise Software Development Kit 12 SP3",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle-sdk:12:sp3"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 12-LTSS",
"product": {
"name": "SUSE Linux Enterprise Server 12-LTSS",
"product_id": "SUSE Linux Enterprise Server 12-LTSS",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles-ltss:12"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 12 SP1-LTSS",
"product": {
"name": "SUSE Linux Enterprise Server 12 SP1-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP1-LTSS",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles-ltss:12:sp1"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 12 SP2-LTSS",
"product": {
"name": "SUSE Linux Enterprise Server 12 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP2-LTSS",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles-ltss:12:sp2"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 12 SP3",
"product": {
"name": "SUSE Linux Enterprise Server 12 SP3",
"product_id": "SUSE Linux Enterprise Server 12 SP3",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles:12:sp3"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server for SAP Applications 12 SP3",
"product": {
"name": "SUSE Linux Enterprise Server for SAP Applications 12 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP3",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles_sap:12:sp3"
}
}
},
{
"category": "product_name",
"name": "SUSE Enterprise Storage 4",
"product": {
"name": "SUSE Enterprise Storage 4",
"product_id": "SUSE Enterprise Storage 4",
"product_identification_helper": {
"cpe": "cpe:/o:suse:ses:4"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.s390x as component of SUSE OpenStack Cloud 7",
"product_id": "SUSE OpenStack Cloud 7:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.s390x"
},
"product_reference": "java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.s390x",
"relates_to_product_reference": "SUSE OpenStack Cloud 7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.x86_64 as component of SUSE OpenStack Cloud 7",
"product_id": "SUSE OpenStack Cloud 7:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.x86_64"
},
"product_reference": "java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.x86_64",
"relates_to_product_reference": "SUSE OpenStack Cloud 7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-alsa-1.7.1_sr4.30-38.26.1.x86_64 as component of SUSE OpenStack Cloud 7",
"product_id": "SUSE OpenStack Cloud 7:java-1_7_1-ibm-alsa-1.7.1_sr4.30-38.26.1.x86_64"
},
"product_reference": "java-1_7_1-ibm-alsa-1.7.1_sr4.30-38.26.1.x86_64",
"relates_to_product_reference": "SUSE OpenStack Cloud 7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.s390x as component of SUSE OpenStack Cloud 7",
"product_id": "SUSE OpenStack Cloud 7:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.s390x"
},
"product_reference": "java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.s390x",
"relates_to_product_reference": "SUSE OpenStack Cloud 7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.x86_64 as component of SUSE OpenStack Cloud 7",
"product_id": "SUSE OpenStack Cloud 7:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.x86_64"
},
"product_reference": "java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.x86_64",
"relates_to_product_reference": "SUSE OpenStack Cloud 7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.s390x as component of SUSE OpenStack Cloud 7",
"product_id": "SUSE OpenStack Cloud 7:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.s390x"
},
"product_reference": "java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.s390x",
"relates_to_product_reference": "SUSE OpenStack Cloud 7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.x86_64 as component of SUSE OpenStack Cloud 7",
"product_id": "SUSE OpenStack Cloud 7:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.x86_64"
},
"product_reference": "java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.x86_64",
"relates_to_product_reference": "SUSE OpenStack Cloud 7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-plugin-1.7.1_sr4.30-38.26.1.x86_64 as component of SUSE OpenStack Cloud 7",
"product_id": "SUSE OpenStack Cloud 7:java-1_7_1-ibm-plugin-1.7.1_sr4.30-38.26.1.x86_64"
},
"product_reference": "java-1_7_1-ibm-plugin-1.7.1_sr4.30-38.26.1.x86_64",
"relates_to_product_reference": "SUSE OpenStack Cloud 7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.ppc64le"
},
"product_reference": "java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.x86_64"
},
"product_reference": "java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-alsa-1.7.1_sr4.30-38.26.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-alsa-1.7.1_sr4.30-38.26.1.x86_64"
},
"product_reference": "java-1_7_1-ibm-alsa-1.7.1_sr4.30-38.26.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.ppc64le"
},
"product_reference": "java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.x86_64"
},
"product_reference": "java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.ppc64le"
},
"product_reference": "java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.x86_64"
},
"product_reference": "java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-plugin-1.7.1_sr4.30-38.26.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-plugin-1.7.1_sr4.30-38.26.1.x86_64"
},
"product_reference": "java-1_7_1-ibm-plugin-1.7.1_sr4.30-38.26.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.ppc64le"
},
"product_reference": "java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.x86_64"
},
"product_reference": "java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-alsa-1.7.1_sr4.30-38.26.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-alsa-1.7.1_sr4.30-38.26.1.x86_64"
},
"product_reference": "java-1_7_1-ibm-alsa-1.7.1_sr4.30-38.26.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.ppc64le"
},
"product_reference": "java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.x86_64"
},
"product_reference": "java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.ppc64le"
},
"product_reference": "java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.x86_64"
},
"product_reference": "java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-plugin-1.7.1_sr4.30-38.26.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-plugin-1.7.1_sr4.30-38.26.1.x86_64"
},
"product_reference": "java-1_7_1-ibm-plugin-1.7.1_sr4.30-38.26.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.ppc64le as component of SUSE Linux Enterprise Software Development Kit 12 SP3",
"product_id": "SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.ppc64le"
},
"product_reference": "java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.s390x as component of SUSE Linux Enterprise Software Development Kit 12 SP3",
"product_id": "SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.s390x"
},
"product_reference": "java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.x86_64 as component of SUSE Linux Enterprise Software Development Kit 12 SP3",
"product_id": "SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.x86_64"
},
"product_reference": "java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.ppc64le as component of SUSE Linux Enterprise Server 12-LTSS",
"product_id": "SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.ppc64le"
},
"product_reference": "java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.s390x as component of SUSE Linux Enterprise Server 12-LTSS",
"product_id": "SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.s390x"
},
"product_reference": "java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.x86_64 as component of SUSE Linux Enterprise Server 12-LTSS",
"product_id": "SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.x86_64"
},
"product_reference": "java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-alsa-1.7.1_sr4.30-38.26.1.x86_64 as component of SUSE Linux Enterprise Server 12-LTSS",
"product_id": "SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.30-38.26.1.x86_64"
},
"product_reference": "java-1_7_1-ibm-alsa-1.7.1_sr4.30-38.26.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.ppc64le as component of SUSE Linux Enterprise Server 12-LTSS",
"product_id": "SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.ppc64le"
},
"product_reference": "java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.s390x as component of SUSE Linux Enterprise Server 12-LTSS",
"product_id": "SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.s390x"
},
"product_reference": "java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.x86_64 as component of SUSE Linux Enterprise Server 12-LTSS",
"product_id": "SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.x86_64"
},
"product_reference": "java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.ppc64le as component of SUSE Linux Enterprise Server 12-LTSS",
"product_id": "SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.ppc64le"
},
"product_reference": "java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.s390x as component of SUSE Linux Enterprise Server 12-LTSS",
"product_id": "SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.s390x"
},
"product_reference": "java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.x86_64 as component of SUSE Linux Enterprise Server 12-LTSS",
"product_id": "SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.x86_64"
},
"product_reference": "java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-plugin-1.7.1_sr4.30-38.26.1.x86_64 as component of SUSE Linux Enterprise Server 12-LTSS",
"product_id": "SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.30-38.26.1.x86_64"
},
"product_reference": "java-1_7_1-ibm-plugin-1.7.1_sr4.30-38.26.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP1-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.ppc64le"
},
"product_reference": "java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.s390x as component of SUSE Linux Enterprise Server 12 SP1-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.s390x"
},
"product_reference": "java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP1-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.x86_64"
},
"product_reference": "java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-alsa-1.7.1_sr4.30-38.26.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP1-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.30-38.26.1.x86_64"
},
"product_reference": "java-1_7_1-ibm-alsa-1.7.1_sr4.30-38.26.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP1-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.ppc64le"
},
"product_reference": "java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.s390x as component of SUSE Linux Enterprise Server 12 SP1-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.s390x"
},
"product_reference": "java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP1-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.x86_64"
},
"product_reference": "java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP1-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.ppc64le"
},
"product_reference": "java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.s390x as component of SUSE Linux Enterprise Server 12 SP1-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.s390x"
},
"product_reference": "java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP1-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.x86_64"
},
"product_reference": "java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-plugin-1.7.1_sr4.30-38.26.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP1-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.30-38.26.1.x86_64"
},
"product_reference": "java-1_7_1-ibm-plugin-1.7.1_sr4.30-38.26.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.ppc64le"
},
"product_reference": "java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.s390x as component of SUSE Linux Enterprise Server 12 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.s390x"
},
"product_reference": "java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.x86_64"
},
"product_reference": "java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-alsa-1.7.1_sr4.30-38.26.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.30-38.26.1.x86_64"
},
"product_reference": "java-1_7_1-ibm-alsa-1.7.1_sr4.30-38.26.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.ppc64le"
},
"product_reference": "java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.s390x as component of SUSE Linux Enterprise Server 12 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.s390x"
},
"product_reference": "java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.x86_64"
},
"product_reference": "java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.ppc64le"
},
"product_reference": "java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.s390x as component of SUSE Linux Enterprise Server 12 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.s390x"
},
"product_reference": "java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.x86_64"
},
"product_reference": "java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-plugin-1.7.1_sr4.30-38.26.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.30-38.26.1.x86_64"
},
"product_reference": "java-1_7_1-ibm-plugin-1.7.1_sr4.30-38.26.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP3",
"product_id": "SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.ppc64le"
},
"product_reference": "java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.s390x as component of SUSE Linux Enterprise Server 12 SP3",
"product_id": "SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.s390x"
},
"product_reference": "java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP3",
"product_id": "SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.x86_64"
},
"product_reference": "java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-alsa-1.7.1_sr4.30-38.26.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP3",
"product_id": "SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-alsa-1.7.1_sr4.30-38.26.1.x86_64"
},
"product_reference": "java-1_7_1-ibm-alsa-1.7.1_sr4.30-38.26.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP3",
"product_id": "SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.ppc64le"
},
"product_reference": "java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.s390x as component of SUSE Linux Enterprise Server 12 SP3",
"product_id": "SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.s390x"
},
"product_reference": "java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP3",
"product_id": "SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.x86_64"
},
"product_reference": "java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-plugin-1.7.1_sr4.30-38.26.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP3",
"product_id": "SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-plugin-1.7.1_sr4.30-38.26.1.x86_64"
},
"product_reference": "java-1_7_1-ibm-plugin-1.7.1_sr4.30-38.26.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.ppc64le"
},
"product_reference": "java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.s390x"
},
"product_reference": "java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.x86_64"
},
"product_reference": "java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-alsa-1.7.1_sr4.30-38.26.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-alsa-1.7.1_sr4.30-38.26.1.x86_64"
},
"product_reference": "java-1_7_1-ibm-alsa-1.7.1_sr4.30-38.26.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.ppc64le"
},
"product_reference": "java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.s390x"
},
"product_reference": "java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.x86_64"
},
"product_reference": "java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-plugin-1.7.1_sr4.30-38.26.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-plugin-1.7.1_sr4.30-38.26.1.x86_64"
},
"product_reference": "java-1_7_1-ibm-plugin-1.7.1_sr4.30-38.26.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.x86_64 as component of SUSE Enterprise Storage 4",
"product_id": "SUSE Enterprise Storage 4:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.x86_64"
},
"product_reference": "java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.x86_64",
"relates_to_product_reference": "SUSE Enterprise Storage 4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-alsa-1.7.1_sr4.30-38.26.1.x86_64 as component of SUSE Enterprise Storage 4",
"product_id": "SUSE Enterprise Storage 4:java-1_7_1-ibm-alsa-1.7.1_sr4.30-38.26.1.x86_64"
},
"product_reference": "java-1_7_1-ibm-alsa-1.7.1_sr4.30-38.26.1.x86_64",
"relates_to_product_reference": "SUSE Enterprise Storage 4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.x86_64 as component of SUSE Enterprise Storage 4",
"product_id": "SUSE Enterprise Storage 4:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.x86_64"
},
"product_reference": "java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.x86_64",
"relates_to_product_reference": "SUSE Enterprise Storage 4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.x86_64 as component of SUSE Enterprise Storage 4",
"product_id": "SUSE Enterprise Storage 4:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.x86_64"
},
"product_reference": "java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.x86_64",
"relates_to_product_reference": "SUSE Enterprise Storage 4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-plugin-1.7.1_sr4.30-38.26.1.x86_64 as component of SUSE Enterprise Storage 4",
"product_id": "SUSE Enterprise Storage 4:java-1_7_1-ibm-plugin-1.7.1_sr4.30-38.26.1.x86_64"
},
"product_reference": "java-1_7_1-ibm-plugin-1.7.1_sr4.30-38.26.1.x86_64",
"relates_to_product_reference": "SUSE Enterprise Storage 4"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2018-12539",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-12539"
}
],
"notes": [
{
"category": "general",
"text": "In Eclipse OpenJ9 version 0.8, users other than the process owner may be able to use Java Attach API to connect to an Eclipse OpenJ9 or IBM JVM on the same machine and use Attach API operations, which includes the ability to execute untrusted native code. Attach API is enabled by default on Windows, Linux and AIX JVMs and can be disabled using the command line option -Dcom.ibm.tools.attach.enable=no.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Enterprise Storage 4:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-alsa-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-plugin-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-alsa-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-plugin-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-alsa-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-plugin-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-alsa-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-plugin-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-alsa-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-plugin-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-alsa-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-plugin-1.7.1_sr4.30-38.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-12539",
"url": "https://www.suse.com/security/cve/CVE-2018-12539"
},
{
"category": "external",
"summary": "SUSE Bug 1101645 for CVE-2018-12539",
"url": "https://bugzilla.suse.com/1101645"
},
{
"category": "external",
"summary": "SUSE Bug 1101656 for CVE-2018-12539",
"url": "https://bugzilla.suse.com/1101656"
},
{
"category": "external",
"summary": "SUSE Bug 1104668 for CVE-2018-12539",
"url": "https://bugzilla.suse.com/1104668"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Enterprise Storage 4:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-alsa-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-plugin-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-alsa-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-plugin-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-alsa-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-plugin-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-alsa-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-plugin-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-alsa-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-plugin-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-alsa-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-plugin-1.7.1_sr4.30-38.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.4,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"SUSE Enterprise Storage 4:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-alsa-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-plugin-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-alsa-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-plugin-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-alsa-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-plugin-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-alsa-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-plugin-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-alsa-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-plugin-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-alsa-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-plugin-1.7.1_sr4.30-38.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-09-07T11:42:39Z",
"details": "moderate"
}
],
"title": "CVE-2018-12539"
},
{
"cve": "CVE-2018-1517",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-1517"
}
],
"notes": [
{
"category": "general",
"text": "A flaw in the java.math component in IBM SDK, Java Technology Edition 6.0, 7.0, and 8.0 may allow an attacker to inflict a denial-of-service attack with specially crafted String data. IBM X-Force ID: 141681.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Enterprise Storage 4:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-alsa-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-plugin-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-alsa-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-plugin-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-alsa-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-plugin-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-alsa-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-plugin-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-alsa-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-plugin-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-alsa-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-plugin-1.7.1_sr4.30-38.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-1517",
"url": "https://www.suse.com/security/cve/CVE-2018-1517"
},
{
"category": "external",
"summary": "SUSE Bug 1101645 for CVE-2018-1517",
"url": "https://bugzilla.suse.com/1101645"
},
{
"category": "external",
"summary": "SUSE Bug 1101656 for CVE-2018-1517",
"url": "https://bugzilla.suse.com/1101656"
},
{
"category": "external",
"summary": "SUSE Bug 1104668 for CVE-2018-1517",
"url": "https://bugzilla.suse.com/1104668"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Enterprise Storage 4:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-alsa-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-plugin-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-alsa-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-plugin-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-alsa-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-plugin-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-alsa-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-plugin-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-alsa-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-plugin-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-alsa-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-plugin-1.7.1_sr4.30-38.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"SUSE Enterprise Storage 4:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-alsa-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-plugin-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-alsa-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-plugin-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-alsa-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-plugin-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-alsa-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-plugin-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-alsa-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-plugin-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-alsa-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-plugin-1.7.1_sr4.30-38.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-09-07T11:42:39Z",
"details": "moderate"
}
],
"title": "CVE-2018-1517"
},
{
"cve": "CVE-2018-1656",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-1656"
}
],
"notes": [
{
"category": "general",
"text": "The IBM Java Runtime Environment\u0027s Diagnostic Tooling Framework for Java (DTFJ) (IBM SDK, Java Technology Edition 6.0 , 7.0, and 8.0) does not protect against path traversal attacks when extracting compressed dump files. IBM X-Force ID: 144882.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Enterprise Storage 4:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-alsa-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-plugin-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-alsa-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-plugin-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-alsa-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-plugin-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-alsa-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-plugin-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-alsa-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-plugin-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-alsa-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-plugin-1.7.1_sr4.30-38.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-1656",
"url": "https://www.suse.com/security/cve/CVE-2018-1656"
},
{
"category": "external",
"summary": "SUSE Bug 1101645 for CVE-2018-1656",
"url": "https://bugzilla.suse.com/1101645"
},
{
"category": "external",
"summary": "SUSE Bug 1101656 for CVE-2018-1656",
"url": "https://bugzilla.suse.com/1101656"
},
{
"category": "external",
"summary": "SUSE Bug 1104668 for CVE-2018-1656",
"url": "https://bugzilla.suse.com/1104668"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Enterprise Storage 4:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-alsa-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-plugin-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-alsa-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-plugin-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-alsa-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-plugin-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-alsa-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-plugin-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-alsa-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-plugin-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-alsa-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-plugin-1.7.1_sr4.30-38.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.4,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:N",
"version": "3.0"
},
"products": [
"SUSE Enterprise Storage 4:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-alsa-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-plugin-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-alsa-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-plugin-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-alsa-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-plugin-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-alsa-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-plugin-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-alsa-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-plugin-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-alsa-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-plugin-1.7.1_sr4.30-38.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-09-07T11:42:39Z",
"details": "moderate"
}
],
"title": "CVE-2018-1656"
},
{
"cve": "CVE-2018-2940",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-2940"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries). Supported versions that are affected are Java SE: 6u191, 7u181, 8u172 and 10.0.1; Java SE Embedded: 8u171. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 4.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Enterprise Storage 4:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-alsa-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-plugin-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-alsa-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-plugin-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-alsa-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-plugin-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-alsa-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-plugin-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-alsa-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-plugin-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-alsa-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-plugin-1.7.1_sr4.30-38.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-2940",
"url": "https://www.suse.com/security/cve/CVE-2018-2940"
},
{
"category": "external",
"summary": "SUSE Bug 1101645 for CVE-2018-2940",
"url": "https://bugzilla.suse.com/1101645"
},
{
"category": "external",
"summary": "SUSE Bug 1101656 for CVE-2018-2940",
"url": "https://bugzilla.suse.com/1101656"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Enterprise Storage 4:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-alsa-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-plugin-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-alsa-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-plugin-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-alsa-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-plugin-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-alsa-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-plugin-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-alsa-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-plugin-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-alsa-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-plugin-1.7.1_sr4.30-38.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"SUSE Enterprise Storage 4:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-alsa-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-plugin-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-alsa-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-plugin-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-alsa-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-plugin-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-alsa-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-plugin-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-alsa-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-plugin-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-alsa-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-plugin-1.7.1_sr4.30-38.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-09-07T11:42:39Z",
"details": "moderate"
}
],
"title": "CVE-2018-2940"
},
{
"cve": "CVE-2018-2952",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-2952"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Concurrency). Supported versions that are affected are Java SE: 6u191, 7u181, 8u172 and 10.0.1; Java SE Embedded: 8u171; JRockit: R28.3.18. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 3.7 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Enterprise Storage 4:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-alsa-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-plugin-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-alsa-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-plugin-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-alsa-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-plugin-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-alsa-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-plugin-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-alsa-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-plugin-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-alsa-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-plugin-1.7.1_sr4.30-38.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-2952",
"url": "https://www.suse.com/security/cve/CVE-2018-2952"
},
{
"category": "external",
"summary": "SUSE Bug 1101645 for CVE-2018-2952",
"url": "https://bugzilla.suse.com/1101645"
},
{
"category": "external",
"summary": "SUSE Bug 1101651 for CVE-2018-2952",
"url": "https://bugzilla.suse.com/1101651"
},
{
"category": "external",
"summary": "SUSE Bug 1101656 for CVE-2018-2952",
"url": "https://bugzilla.suse.com/1101656"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Enterprise Storage 4:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-alsa-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-plugin-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-alsa-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-plugin-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-alsa-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-plugin-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-alsa-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-plugin-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-alsa-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-plugin-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-alsa-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-plugin-1.7.1_sr4.30-38.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"SUSE Enterprise Storage 4:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-alsa-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-plugin-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-alsa-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-plugin-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-alsa-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-plugin-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-alsa-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-plugin-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-alsa-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-plugin-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-alsa-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-plugin-1.7.1_sr4.30-38.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-09-07T11:42:39Z",
"details": "important"
}
],
"title": "CVE-2018-2952"
},
{
"cve": "CVE-2018-2973",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-2973"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: JSSE). Supported versions that are affected are Java SE: 6u191, 7u181, 8u172 and 10.0.1; Java SE Embedded: 8u171. Difficult to exploit vulnerability allows unauthenticated attacker with network access via SSL/TLS to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 5.9 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Enterprise Storage 4:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-alsa-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-plugin-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-alsa-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-plugin-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-alsa-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-plugin-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-alsa-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-plugin-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-alsa-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-plugin-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-alsa-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-plugin-1.7.1_sr4.30-38.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-2973",
"url": "https://www.suse.com/security/cve/CVE-2018-2973"
},
{
"category": "external",
"summary": "SUSE Bug 1101645 for CVE-2018-2973",
"url": "https://bugzilla.suse.com/1101645"
},
{
"category": "external",
"summary": "SUSE Bug 1101656 for CVE-2018-2973",
"url": "https://bugzilla.suse.com/1101656"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Enterprise Storage 4:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-alsa-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-plugin-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-alsa-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-plugin-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-alsa-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-plugin-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-alsa-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-plugin-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-alsa-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-plugin-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-alsa-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-plugin-1.7.1_sr4.30-38.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.0"
},
"products": [
"SUSE Enterprise Storage 4:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-alsa-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-plugin-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-alsa-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-plugin-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-alsa-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-plugin-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-alsa-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-plugin-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-alsa-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-plugin-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-alsa-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-plugin-1.7.1_sr4.30-38.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-09-07T11:42:39Z",
"details": "moderate"
}
],
"title": "CVE-2018-2973"
}
]
}
suse-su-2018:2839-1
Vulnerability from csaf_suse
Published
2018-09-24 10:54
Modified
2018-09-24 10:54
Summary
Security update for java-1_8_0-ibm
Notes
Title of the patch
Security update for java-1_8_0-ibm
Description of the patch
This update for java-1_8_0-ibm to 8.0.5.20 fixes the following security issues:
- CVE-2018-2952: Vulnerability in subcomponent: Concurrency. Difficult to
exploit vulnerability allowed unauthenticated attacker with network access via
multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful
attacks of this vulnerability can result in unauthorized ability to cause a
partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit
(bsc#1104668)
- CVE-2018-2940: Vulnerability in subcomponent: Libraries. Easily exploitable
vulnerability allowed unauthenticated attacker with network access via multiple
protocols to compromise Java SE, Java SE Embedded. Successful attacks require
human interaction from a person other than the attacker. Successful attacks of
this vulnerability can result in unauthorized read access to a subset of Java
SE, Java SE Embedded accessible data (bsc#1104668)
- CVE-2018-2973: Vulnerability in subcomponent: JSSE. Difficult to exploit
vulnerability allowed unauthenticated attacker with network access via SSL/TLS
to compromise Java SE, Java SE Embedded. Successful attacks of this
vulnerability can result in unauthorized creation, deletion or modification
access to critical data or all Java SE, Java SE Embedded accessible data
(bsc#1104668)
- CVE-2018-2964: Vulnerability in subcomponent: Deployment. Difficult to
exploit vulnerability allowed unauthenticated attacker with network access via
multiple protocols to compromise Java SE. Successful attacks require human
interaction from a person other than the attacker. Successful attacks of this
vulnerability can result in takeover of Java SE. (bsc#1104668)
- CVE-2016-0705: Prevent double free in the dsa_priv_decode function that
allowed remote attackers to cause a denial of service (memory corruption) or
possibly have unspecified other impact via a malformed DSA private key
(bsc#1104668)
- CVE-2017-3732: Prevent carry propagating bug in the x86_64 Montgomery
squaring procedure (bsc#1104668)
- CVE-2017-3736: Prevent carry propagating bug in the x86_64 Montgomery
squaring procedure (bsc#1104668)
- CVE-2018-1517: Unspecified vulnerability (bsc#1104668)
- CVE-2018-1656: Unspecified vulnerability (bsc#1104668)
- CVE-2018-12539: Users other than the process owner might have been able to
use Java Attach API to connect to an IBM JVM on the same machine and use Attach
API operations, which includes the ability to execute untrusted native code
(bsc#1104668)
Patchnames
SUSE-OpenStack-Cloud-7-2018-1987,SUSE-SLE-SAP-12-SP1-2018-1987,SUSE-SLE-SAP-12-SP2-2018-1987,SUSE-SLE-SDK-12-SP3-2018-1987,SUSE-SLE-SERVER-12-SP1-2018-1987,SUSE-SLE-SERVER-12-SP2-2018-1987,SUSE-SLE-SERVER-12-SP3-2018-1987,SUSE-Storage-4-2018-1987
Terms of use
CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for java-1_8_0-ibm",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This update for java-1_8_0-ibm to 8.0.5.20 fixes the following security issues:\n\n- CVE-2018-2952: Vulnerability in subcomponent: Concurrency. Difficult to\n exploit vulnerability allowed unauthenticated attacker with network access via\n multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful\n attacks of this vulnerability can result in unauthorized ability to cause a\n partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit\n (bsc#1104668)\n- CVE-2018-2940: Vulnerability in subcomponent: Libraries. Easily exploitable\n vulnerability allowed unauthenticated attacker with network access via multiple\n protocols to compromise Java SE, Java SE Embedded. Successful attacks require\n human interaction from a person other than the attacker. Successful attacks of\n this vulnerability can result in unauthorized read access to a subset of Java\n SE, Java SE Embedded accessible data (bsc#1104668)\n- CVE-2018-2973: Vulnerability in subcomponent: JSSE. Difficult to exploit\n vulnerability allowed unauthenticated attacker with network access via SSL/TLS\n to compromise Java SE, Java SE Embedded. Successful attacks of this\n vulnerability can result in unauthorized creation, deletion or modification\n access to critical data or all Java SE, Java SE Embedded accessible data\n (bsc#1104668)\n- CVE-2018-2964: Vulnerability in subcomponent: Deployment. Difficult to\n exploit vulnerability allowed unauthenticated attacker with network access via\n multiple protocols to compromise Java SE. Successful attacks require human\n interaction from a person other than the attacker. Successful attacks of this\n vulnerability can result in takeover of Java SE. (bsc#1104668)\n- CVE-2016-0705: Prevent double free in the dsa_priv_decode function that\n allowed remote attackers to cause a denial of service (memory corruption) or\n possibly have unspecified other impact via a malformed DSA private key\n (bsc#1104668)\n- CVE-2017-3732: Prevent carry propagating bug in the x86_64 Montgomery\n squaring procedure (bsc#1104668)\n- CVE-2017-3736: Prevent carry propagating bug in the x86_64 Montgomery\n squaring procedure (bsc#1104668)\n- CVE-2018-1517: Unspecified vulnerability (bsc#1104668)\n- CVE-2018-1656: Unspecified vulnerability (bsc#1104668)\n- CVE-2018-12539: Users other than the process owner might have been able to\n use Java Attach API to connect to an IBM JVM on the same machine and use Attach\n API operations, which includes the ability to execute untrusted native code\n (bsc#1104668)\n\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "SUSE-OpenStack-Cloud-7-2018-1987,SUSE-SLE-SAP-12-SP1-2018-1987,SUSE-SLE-SAP-12-SP2-2018-1987,SUSE-SLE-SDK-12-SP3-2018-1987,SUSE-SLE-SERVER-12-SP1-2018-1987,SUSE-SLE-SERVER-12-SP2-2018-1987,SUSE-SLE-SERVER-12-SP3-2018-1987,SUSE-Storage-4-2018-1987",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2018_2839-1.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2018:2839-1",
"url": "https://www.suse.com/support/update/announcement/2018/suse-su-20182839-1/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2018:2839-1",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2018-September/004590.html"
},
{
"category": "self",
"summary": "SUSE Bug 1104668",
"url": "https://bugzilla.suse.com/1104668"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-0705 page",
"url": "https://www.suse.com/security/cve/CVE-2016-0705/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-3732 page",
"url": "https://www.suse.com/security/cve/CVE-2017-3732/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-3736 page",
"url": "https://www.suse.com/security/cve/CVE-2017-3736/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-12539 page",
"url": "https://www.suse.com/security/cve/CVE-2018-12539/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-1517 page",
"url": "https://www.suse.com/security/cve/CVE-2018-1517/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-1656 page",
"url": "https://www.suse.com/security/cve/CVE-2018-1656/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-2940 page",
"url": "https://www.suse.com/security/cve/CVE-2018-2940/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-2952 page",
"url": "https://www.suse.com/security/cve/CVE-2018-2952/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-2964 page",
"url": "https://www.suse.com/security/cve/CVE-2018-2964/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-2973 page",
"url": "https://www.suse.com/security/cve/CVE-2018-2973/"
}
],
"title": "Security update for java-1_8_0-ibm",
"tracking": {
"current_release_date": "2018-09-24T10:54:00Z",
"generator": {
"date": "2018-09-24T10:54:00Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2018:2839-1",
"initial_release_date": "2018-09-24T10:54:00Z",
"revision_history": [
{
"date": "2018-09-24T10:54:00Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.ppc64le",
"product": {
"name": "java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.ppc64le",
"product_id": "java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.ppc64le"
}
},
{
"category": "product_version",
"name": "java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.ppc64le",
"product": {
"name": "java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.ppc64le",
"product_id": "java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.ppc64le"
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.s390x",
"product": {
"name": "java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.s390x",
"product_id": "java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.s390x"
}
},
{
"category": "product_version",
"name": "java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.s390x",
"product": {
"name": "java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.s390x",
"product_id": "java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"product": {
"name": "java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"product_id": "java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64"
}
},
{
"category": "product_version",
"name": "java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"product": {
"name": "java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"product_id": "java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64"
}
},
{
"category": "product_version",
"name": "java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64",
"product": {
"name": "java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64",
"product_id": "java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64"
}
},
{
"category": "product_version",
"name": "java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64",
"product": {
"name": "java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64",
"product_id": "java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE OpenStack Cloud 7",
"product": {
"name": "SUSE OpenStack Cloud 7",
"product_id": "SUSE OpenStack Cloud 7",
"product_identification_helper": {
"cpe": "cpe:/o:suse:suse-openstack-cloud:7"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server for SAP Applications 12 SP1",
"product": {
"name": "SUSE Linux Enterprise Server for SAP Applications 12 SP1",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles_sap:12:sp1"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server for SAP Applications 12 SP2",
"product": {
"name": "SUSE Linux Enterprise Server for SAP Applications 12 SP2",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP2",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles_sap:12:sp2"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Software Development Kit 12 SP3",
"product": {
"name": "SUSE Linux Enterprise Software Development Kit 12 SP3",
"product_id": "SUSE Linux Enterprise Software Development Kit 12 SP3",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle-sdk:12:sp3"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 12 SP1-LTSS",
"product": {
"name": "SUSE Linux Enterprise Server 12 SP1-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP1-LTSS",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles-ltss:12:sp1"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 12 SP2-LTSS",
"product": {
"name": "SUSE Linux Enterprise Server 12 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP2-LTSS",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles-ltss:12:sp2"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 12 SP3",
"product": {
"name": "SUSE Linux Enterprise Server 12 SP3",
"product_id": "SUSE Linux Enterprise Server 12 SP3",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles:12:sp3"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server for SAP Applications 12 SP3",
"product": {
"name": "SUSE Linux Enterprise Server for SAP Applications 12 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP3",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles_sap:12:sp3"
}
}
},
{
"category": "product_name",
"name": "SUSE Enterprise Storage 4",
"product": {
"name": "SUSE Enterprise Storage 4",
"product_id": "SUSE Enterprise Storage 4",
"product_identification_helper": {
"cpe": "cpe:/o:suse:ses:4"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.s390x as component of SUSE OpenStack Cloud 7",
"product_id": "SUSE OpenStack Cloud 7:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.s390x"
},
"product_reference": "java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.s390x",
"relates_to_product_reference": "SUSE OpenStack Cloud 7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64 as component of SUSE OpenStack Cloud 7",
"product_id": "SUSE OpenStack Cloud 7:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64"
},
"product_reference": "java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"relates_to_product_reference": "SUSE OpenStack Cloud 7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64 as component of SUSE OpenStack Cloud 7",
"product_id": "SUSE OpenStack Cloud 7:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64"
},
"product_reference": "java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"relates_to_product_reference": "SUSE OpenStack Cloud 7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.s390x as component of SUSE OpenStack Cloud 7",
"product_id": "SUSE OpenStack Cloud 7:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.s390x"
},
"product_reference": "java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.s390x",
"relates_to_product_reference": "SUSE OpenStack Cloud 7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64 as component of SUSE OpenStack Cloud 7",
"product_id": "SUSE OpenStack Cloud 7:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64"
},
"product_reference": "java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64",
"relates_to_product_reference": "SUSE OpenStack Cloud 7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64 as component of SUSE OpenStack Cloud 7",
"product_id": "SUSE OpenStack Cloud 7:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64"
},
"product_reference": "java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64",
"relates_to_product_reference": "SUSE OpenStack Cloud 7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.ppc64le"
},
"product_reference": "java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64"
},
"product_reference": "java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64"
},
"product_reference": "java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.ppc64le"
},
"product_reference": "java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64"
},
"product_reference": "java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64"
},
"product_reference": "java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.ppc64le"
},
"product_reference": "java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64"
},
"product_reference": "java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64"
},
"product_reference": "java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.ppc64le"
},
"product_reference": "java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64"
},
"product_reference": "java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64"
},
"product_reference": "java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.ppc64le as component of SUSE Linux Enterprise Software Development Kit 12 SP3",
"product_id": "SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.ppc64le"
},
"product_reference": "java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.s390x as component of SUSE Linux Enterprise Software Development Kit 12 SP3",
"product_id": "SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.s390x"
},
"product_reference": "java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64 as component of SUSE Linux Enterprise Software Development Kit 12 SP3",
"product_id": "SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64"
},
"product_reference": "java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP1-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.ppc64le"
},
"product_reference": "java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.s390x as component of SUSE Linux Enterprise Server 12 SP1-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.s390x"
},
"product_reference": "java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP1-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64"
},
"product_reference": "java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP1-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64"
},
"product_reference": "java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP1-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.ppc64le"
},
"product_reference": "java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.s390x as component of SUSE Linux Enterprise Server 12 SP1-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.s390x"
},
"product_reference": "java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP1-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64"
},
"product_reference": "java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP1-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64"
},
"product_reference": "java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.ppc64le"
},
"product_reference": "java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.s390x as component of SUSE Linux Enterprise Server 12 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.s390x"
},
"product_reference": "java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64"
},
"product_reference": "java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64"
},
"product_reference": "java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.ppc64le"
},
"product_reference": "java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.s390x as component of SUSE Linux Enterprise Server 12 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.s390x"
},
"product_reference": "java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64"
},
"product_reference": "java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64"
},
"product_reference": "java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP3",
"product_id": "SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.ppc64le"
},
"product_reference": "java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.s390x as component of SUSE Linux Enterprise Server 12 SP3",
"product_id": "SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.s390x"
},
"product_reference": "java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP3",
"product_id": "SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64"
},
"product_reference": "java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP3",
"product_id": "SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64"
},
"product_reference": "java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP3",
"product_id": "SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64"
},
"product_reference": "java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.ppc64le"
},
"product_reference": "java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.s390x"
},
"product_reference": "java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64"
},
"product_reference": "java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64"
},
"product_reference": "java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64"
},
"product_reference": "java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64 as component of SUSE Enterprise Storage 4",
"product_id": "SUSE Enterprise Storage 4:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64"
},
"product_reference": "java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"relates_to_product_reference": "SUSE Enterprise Storage 4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64 as component of SUSE Enterprise Storage 4",
"product_id": "SUSE Enterprise Storage 4:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64"
},
"product_reference": "java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"relates_to_product_reference": "SUSE Enterprise Storage 4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64 as component of SUSE Enterprise Storage 4",
"product_id": "SUSE Enterprise Storage 4:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64"
},
"product_reference": "java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64",
"relates_to_product_reference": "SUSE Enterprise Storage 4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64 as component of SUSE Enterprise Storage 4",
"product_id": "SUSE Enterprise Storage 4:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64"
},
"product_reference": "java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64",
"relates_to_product_reference": "SUSE Enterprise Storage 4"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2016-0705",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-0705"
}
],
"notes": [
{
"category": "general",
"text": "Double free vulnerability in the dsa_priv_decode function in crypto/dsa/dsa_ameth.c in OpenSSL 1.0.1 before 1.0.1s and 1.0.2 before 1.0.2g allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via a malformed DSA private key.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Enterprise Storage 4:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-0705",
"url": "https://www.suse.com/security/cve/CVE-2016-0705"
},
{
"category": "external",
"summary": "SUSE Bug 968044 for CVE-2016-0705",
"url": "https://bugzilla.suse.com/968044"
},
{
"category": "external",
"summary": "SUSE Bug 968047 for CVE-2016-0705",
"url": "https://bugzilla.suse.com/968047"
},
{
"category": "external",
"summary": "SUSE Bug 971238 for CVE-2016-0705",
"url": "https://bugzilla.suse.com/971238"
},
{
"category": "external",
"summary": "SUSE Bug 976341 for CVE-2016-0705",
"url": "https://bugzilla.suse.com/976341"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Enterprise Storage 4:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"SUSE Enterprise Storage 4:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-09-24T10:54:00Z",
"details": "low"
}
],
"title": "CVE-2016-0705"
},
{
"cve": "CVE-2017-3732",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-3732"
}
],
"notes": [
{
"category": "general",
"text": "There is a carry propagating bug in the x86_64 Montgomery squaring procedure in OpenSSL 1.0.2 before 1.0.2k and 1.1.0 before 1.1.0d. No EC algorithms are affected. Analysis suggests that attacks against RSA and DSA as a result of this defect would be very difficult to perform and are not believed likely. Attacks against DH are considered just feasible (although very difficult) because most of the work necessary to deduce information about a private key may be performed offline. The amount of resources required for such an attack would be very significant and likely only accessible to a limited number of attackers. An attacker would additionally need online access to an unpatched system using the target private key in a scenario with persistent DH parameters and a private key that is shared between multiple clients. For example this can occur by default in OpenSSL DHE based SSL/TLS ciphersuites. Note: This issue is very similar to CVE-2015-3193 but must be treated as a separate problem.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Enterprise Storage 4:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-3732",
"url": "https://www.suse.com/security/cve/CVE-2017-3732"
},
{
"category": "external",
"summary": "SUSE Bug 1021641 for CVE-2017-3732",
"url": "https://bugzilla.suse.com/1021641"
},
{
"category": "external",
"summary": "SUSE Bug 1022086 for CVE-2017-3732",
"url": "https://bugzilla.suse.com/1022086"
},
{
"category": "external",
"summary": "SUSE Bug 1049418 for CVE-2017-3732",
"url": "https://bugzilla.suse.com/1049418"
},
{
"category": "external",
"summary": "SUSE Bug 1049421 for CVE-2017-3732",
"url": "https://bugzilla.suse.com/1049421"
},
{
"category": "external",
"summary": "SUSE Bug 1049422 for CVE-2017-3732",
"url": "https://bugzilla.suse.com/1049422"
},
{
"category": "external",
"summary": "SUSE Bug 1066242 for CVE-2017-3732",
"url": "https://bugzilla.suse.com/1066242"
},
{
"category": "external",
"summary": "SUSE Bug 1071906 for CVE-2017-3732",
"url": "https://bugzilla.suse.com/1071906"
},
{
"category": "external",
"summary": "SUSE Bug 957814 for CVE-2017-3732",
"url": "https://bugzilla.suse.com/957814"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Enterprise Storage 4:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Enterprise Storage 4:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-09-24T10:54:00Z",
"details": "low"
}
],
"title": "CVE-2017-3732"
},
{
"cve": "CVE-2017-3736",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-3736"
}
],
"notes": [
{
"category": "general",
"text": "There is a carry propagating bug in the x86_64 Montgomery squaring procedure in OpenSSL before 1.0.2m and 1.1.0 before 1.1.0g. No EC algorithms are affected. Analysis suggests that attacks against RSA and DSA as a result of this defect would be very difficult to perform and are not believed likely. Attacks against DH are considered just feasible (although very difficult) because most of the work necessary to deduce information about a private key may be performed offline. The amount of resources required for such an attack would be very significant and likely only accessible to a limited number of attackers. An attacker would additionally need online access to an unpatched system using the target private key in a scenario with persistent DH parameters and a private key that is shared between multiple clients. This only affects processors that support the BMI1, BMI2 and ADX extensions like Intel Broadwell (5th generation) and later or AMD Ryzen.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Enterprise Storage 4:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-3736",
"url": "https://www.suse.com/security/cve/CVE-2017-3736"
},
{
"category": "external",
"summary": "SUSE Bug 1066242 for CVE-2017-3736",
"url": "https://bugzilla.suse.com/1066242"
},
{
"category": "external",
"summary": "SUSE Bug 1071906 for CVE-2017-3736",
"url": "https://bugzilla.suse.com/1071906"
},
{
"category": "external",
"summary": "SUSE Bug 1076369 for CVE-2017-3736",
"url": "https://bugzilla.suse.com/1076369"
},
{
"category": "external",
"summary": "SUSE Bug 957814 for CVE-2017-3736",
"url": "https://bugzilla.suse.com/957814"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Enterprise Storage 4:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.4,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.0"
},
"products": [
"SUSE Enterprise Storage 4:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-09-24T10:54:00Z",
"details": "moderate"
}
],
"title": "CVE-2017-3736"
},
{
"cve": "CVE-2018-12539",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-12539"
}
],
"notes": [
{
"category": "general",
"text": "In Eclipse OpenJ9 version 0.8, users other than the process owner may be able to use Java Attach API to connect to an Eclipse OpenJ9 or IBM JVM on the same machine and use Attach API operations, which includes the ability to execute untrusted native code. Attach API is enabled by default on Windows, Linux and AIX JVMs and can be disabled using the command line option -Dcom.ibm.tools.attach.enable=no.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Enterprise Storage 4:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-12539",
"url": "https://www.suse.com/security/cve/CVE-2018-12539"
},
{
"category": "external",
"summary": "SUSE Bug 1101645 for CVE-2018-12539",
"url": "https://bugzilla.suse.com/1101645"
},
{
"category": "external",
"summary": "SUSE Bug 1101656 for CVE-2018-12539",
"url": "https://bugzilla.suse.com/1101656"
},
{
"category": "external",
"summary": "SUSE Bug 1104668 for CVE-2018-12539",
"url": "https://bugzilla.suse.com/1104668"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Enterprise Storage 4:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.4,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"SUSE Enterprise Storage 4:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-09-24T10:54:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-12539"
},
{
"cve": "CVE-2018-1517",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-1517"
}
],
"notes": [
{
"category": "general",
"text": "A flaw in the java.math component in IBM SDK, Java Technology Edition 6.0, 7.0, and 8.0 may allow an attacker to inflict a denial-of-service attack with specially crafted String data. IBM X-Force ID: 141681.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Enterprise Storage 4:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-1517",
"url": "https://www.suse.com/security/cve/CVE-2018-1517"
},
{
"category": "external",
"summary": "SUSE Bug 1101645 for CVE-2018-1517",
"url": "https://bugzilla.suse.com/1101645"
},
{
"category": "external",
"summary": "SUSE Bug 1101656 for CVE-2018-1517",
"url": "https://bugzilla.suse.com/1101656"
},
{
"category": "external",
"summary": "SUSE Bug 1104668 for CVE-2018-1517",
"url": "https://bugzilla.suse.com/1104668"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Enterprise Storage 4:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"SUSE Enterprise Storage 4:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-09-24T10:54:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-1517"
},
{
"cve": "CVE-2018-1656",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-1656"
}
],
"notes": [
{
"category": "general",
"text": "The IBM Java Runtime Environment\u0027s Diagnostic Tooling Framework for Java (DTFJ) (IBM SDK, Java Technology Edition 6.0 , 7.0, and 8.0) does not protect against path traversal attacks when extracting compressed dump files. IBM X-Force ID: 144882.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Enterprise Storage 4:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-1656",
"url": "https://www.suse.com/security/cve/CVE-2018-1656"
},
{
"category": "external",
"summary": "SUSE Bug 1101645 for CVE-2018-1656",
"url": "https://bugzilla.suse.com/1101645"
},
{
"category": "external",
"summary": "SUSE Bug 1101656 for CVE-2018-1656",
"url": "https://bugzilla.suse.com/1101656"
},
{
"category": "external",
"summary": "SUSE Bug 1104668 for CVE-2018-1656",
"url": "https://bugzilla.suse.com/1104668"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Enterprise Storage 4:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.4,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:N",
"version": "3.0"
},
"products": [
"SUSE Enterprise Storage 4:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-09-24T10:54:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-1656"
},
{
"cve": "CVE-2018-2940",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-2940"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries). Supported versions that are affected are Java SE: 6u191, 7u181, 8u172 and 10.0.1; Java SE Embedded: 8u171. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 4.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Enterprise Storage 4:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-2940",
"url": "https://www.suse.com/security/cve/CVE-2018-2940"
},
{
"category": "external",
"summary": "SUSE Bug 1101645 for CVE-2018-2940",
"url": "https://bugzilla.suse.com/1101645"
},
{
"category": "external",
"summary": "SUSE Bug 1101656 for CVE-2018-2940",
"url": "https://bugzilla.suse.com/1101656"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Enterprise Storage 4:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"SUSE Enterprise Storage 4:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-09-24T10:54:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-2940"
},
{
"cve": "CVE-2018-2952",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-2952"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Concurrency). Supported versions that are affected are Java SE: 6u191, 7u181, 8u172 and 10.0.1; Java SE Embedded: 8u171; JRockit: R28.3.18. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 3.7 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Enterprise Storage 4:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-2952",
"url": "https://www.suse.com/security/cve/CVE-2018-2952"
},
{
"category": "external",
"summary": "SUSE Bug 1101645 for CVE-2018-2952",
"url": "https://bugzilla.suse.com/1101645"
},
{
"category": "external",
"summary": "SUSE Bug 1101651 for CVE-2018-2952",
"url": "https://bugzilla.suse.com/1101651"
},
{
"category": "external",
"summary": "SUSE Bug 1101656 for CVE-2018-2952",
"url": "https://bugzilla.suse.com/1101656"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Enterprise Storage 4:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"SUSE Enterprise Storage 4:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-09-24T10:54:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-2952"
},
{
"cve": "CVE-2018-2964",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-2964"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Deployment). Supported versions that are affected are Java SE: 8u172 and 10.0.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 8.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Enterprise Storage 4:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-2964",
"url": "https://www.suse.com/security/cve/CVE-2018-2964"
},
{
"category": "external",
"summary": "SUSE Bug 1101645 for CVE-2018-2964",
"url": "https://bugzilla.suse.com/1101645"
},
{
"category": "external",
"summary": "SUSE Bug 1101653 for CVE-2018-2964",
"url": "https://bugzilla.suse.com/1101653"
},
{
"category": "external",
"summary": "SUSE Bug 1101656 for CVE-2018-2964",
"url": "https://bugzilla.suse.com/1101656"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Enterprise Storage 4:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.3,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"SUSE Enterprise Storage 4:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-09-24T10:54:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-2964"
},
{
"cve": "CVE-2018-2973",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-2973"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: JSSE). Supported versions that are affected are Java SE: 6u191, 7u181, 8u172 and 10.0.1; Java SE Embedded: 8u171. Difficult to exploit vulnerability allows unauthenticated attacker with network access via SSL/TLS to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 5.9 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Enterprise Storage 4:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-2973",
"url": "https://www.suse.com/security/cve/CVE-2018-2973"
},
{
"category": "external",
"summary": "SUSE Bug 1101645 for CVE-2018-2973",
"url": "https://bugzilla.suse.com/1101645"
},
{
"category": "external",
"summary": "SUSE Bug 1101656 for CVE-2018-2973",
"url": "https://bugzilla.suse.com/1101656"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Enterprise Storage 4:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.0"
},
"products": [
"SUSE Enterprise Storage 4:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-09-24T10:54:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-2973"
}
]
}
suse-su-2018:2839-2
Vulnerability from csaf_suse
Published
2018-10-18 12:49
Modified
2018-10-18 12:49
Summary
Security update for java-1_8_0-ibm
Notes
Title of the patch
Security update for java-1_8_0-ibm
Description of the patch
This update for java-1_8_0-ibm to 8.0.5.20 fixes the following security issues:
- CVE-2018-2952: Vulnerability in subcomponent: Concurrency. Difficult to
exploit vulnerability allowed unauthenticated attacker with network access via
multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful
attacks of this vulnerability can result in unauthorized ability to cause a
partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit
(bsc#1104668)
- CVE-2018-2940: Vulnerability in subcomponent: Libraries. Easily exploitable
vulnerability allowed unauthenticated attacker with network access via multiple
protocols to compromise Java SE, Java SE Embedded. Successful attacks require
human interaction from a person other than the attacker. Successful attacks of
this vulnerability can result in unauthorized read access to a subset of Java
SE, Java SE Embedded accessible data (bsc#1104668)
- CVE-2018-2973: Vulnerability in subcomponent: JSSE. Difficult to exploit
vulnerability allowed unauthenticated attacker with network access via SSL/TLS
to compromise Java SE, Java SE Embedded. Successful attacks of this
vulnerability can result in unauthorized creation, deletion or modification
access to critical data or all Java SE, Java SE Embedded accessible data
(bsc#1104668)
- CVE-2018-2964: Vulnerability in subcomponent: Deployment. Difficult to
exploit vulnerability allowed unauthenticated attacker with network access via
multiple protocols to compromise Java SE. Successful attacks require human
interaction from a person other than the attacker. Successful attacks of this
vulnerability can result in takeover of Java SE. (bsc#1104668)
- CVE-2016-0705: Prevent double free in the dsa_priv_decode function that
allowed remote attackers to cause a denial of service (memory corruption) or
possibly have unspecified other impact via a malformed DSA private key
(bsc#1104668)
- CVE-2017-3732: Prevent carry propagating bug in the x86_64 Montgomery
squaring procedure (bsc#1104668)
- CVE-2017-3736: Prevent carry propagating bug in the x86_64 Montgomery
squaring procedure (bsc#1104668)
- CVE-2018-1517: Unspecified vulnerability (bsc#1104668)
- CVE-2018-1656: Unspecified vulnerability (bsc#1104668)
- CVE-2018-12539: Users other than the process owner might have been able to
use Java Attach API to connect to an IBM JVM on the same machine and use Attach
API operations, which includes the ability to execute untrusted native code
(bsc#1104668)
Patchnames
SUSE-SLE-SERVER-12-SP2-BCL-2018-1987
Terms of use
CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for java-1_8_0-ibm",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This update for java-1_8_0-ibm to 8.0.5.20 fixes the following security issues:\n\n- CVE-2018-2952: Vulnerability in subcomponent: Concurrency. Difficult to\n exploit vulnerability allowed unauthenticated attacker with network access via\n multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful\n attacks of this vulnerability can result in unauthorized ability to cause a\n partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit\n (bsc#1104668)\n- CVE-2018-2940: Vulnerability in subcomponent: Libraries. Easily exploitable\n vulnerability allowed unauthenticated attacker with network access via multiple\n protocols to compromise Java SE, Java SE Embedded. Successful attacks require\n human interaction from a person other than the attacker. Successful attacks of\n this vulnerability can result in unauthorized read access to a subset of Java\n SE, Java SE Embedded accessible data (bsc#1104668)\n- CVE-2018-2973: Vulnerability in subcomponent: JSSE. Difficult to exploit\n vulnerability allowed unauthenticated attacker with network access via SSL/TLS\n to compromise Java SE, Java SE Embedded. Successful attacks of this\n vulnerability can result in unauthorized creation, deletion or modification\n access to critical data or all Java SE, Java SE Embedded accessible data\n (bsc#1104668)\n- CVE-2018-2964: Vulnerability in subcomponent: Deployment. Difficult to\n exploit vulnerability allowed unauthenticated attacker with network access via\n multiple protocols to compromise Java SE. Successful attacks require human\n interaction from a person other than the attacker. Successful attacks of this\n vulnerability can result in takeover of Java SE. (bsc#1104668)\n- CVE-2016-0705: Prevent double free in the dsa_priv_decode function that\n allowed remote attackers to cause a denial of service (memory corruption) or\n possibly have unspecified other impact via a malformed DSA private key\n (bsc#1104668)\n- CVE-2017-3732: Prevent carry propagating bug in the x86_64 Montgomery\n squaring procedure (bsc#1104668)\n- CVE-2017-3736: Prevent carry propagating bug in the x86_64 Montgomery\n squaring procedure (bsc#1104668)\n- CVE-2018-1517: Unspecified vulnerability (bsc#1104668)\n- CVE-2018-1656: Unspecified vulnerability (bsc#1104668)\n- CVE-2018-12539: Users other than the process owner might have been able to\n use Java Attach API to connect to an IBM JVM on the same machine and use Attach\n API operations, which includes the ability to execute untrusted native code\n (bsc#1104668)\n\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "SUSE-SLE-SERVER-12-SP2-BCL-2018-1987",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2018_2839-2.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2018:2839-2",
"url": "https://www.suse.com/support/update/announcement/2018/suse-su-20182839-2/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2018:2839-2",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2018-October/004738.html"
},
{
"category": "self",
"summary": "SUSE Bug 1104668",
"url": "https://bugzilla.suse.com/1104668"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-0705 page",
"url": "https://www.suse.com/security/cve/CVE-2016-0705/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-3732 page",
"url": "https://www.suse.com/security/cve/CVE-2017-3732/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-3736 page",
"url": "https://www.suse.com/security/cve/CVE-2017-3736/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-12539 page",
"url": "https://www.suse.com/security/cve/CVE-2018-12539/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-1517 page",
"url": "https://www.suse.com/security/cve/CVE-2018-1517/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-1656 page",
"url": "https://www.suse.com/security/cve/CVE-2018-1656/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-2940 page",
"url": "https://www.suse.com/security/cve/CVE-2018-2940/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-2952 page",
"url": "https://www.suse.com/security/cve/CVE-2018-2952/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-2964 page",
"url": "https://www.suse.com/security/cve/CVE-2018-2964/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-2973 page",
"url": "https://www.suse.com/security/cve/CVE-2018-2973/"
}
],
"title": "Security update for java-1_8_0-ibm",
"tracking": {
"current_release_date": "2018-10-18T12:49:55Z",
"generator": {
"date": "2018-10-18T12:49:55Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2018:2839-2",
"initial_release_date": "2018-10-18T12:49:55Z",
"revision_history": [
{
"date": "2018-10-18T12:49:55Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"product": {
"name": "java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"product_id": "java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64"
}
},
{
"category": "product_version",
"name": "java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"product": {
"name": "java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"product_id": "java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64"
}
},
{
"category": "product_version",
"name": "java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64",
"product": {
"name": "java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64",
"product_id": "java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64"
}
},
{
"category": "product_version",
"name": "java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64",
"product": {
"name": "java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64",
"product_id": "java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 12 SP2-BCL",
"product": {
"name": "SUSE Linux Enterprise Server 12 SP2-BCL",
"product_id": "SUSE Linux Enterprise Server 12 SP2-BCL",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles-bcl:12:sp2"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP2-BCL",
"product_id": "SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64"
},
"product_reference": "java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2-BCL"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP2-BCL",
"product_id": "SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64"
},
"product_reference": "java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2-BCL"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP2-BCL",
"product_id": "SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64"
},
"product_reference": "java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2-BCL"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP2-BCL",
"product_id": "SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64"
},
"product_reference": "java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2-BCL"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2016-0705",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-0705"
}
],
"notes": [
{
"category": "general",
"text": "Double free vulnerability in the dsa_priv_decode function in crypto/dsa/dsa_ameth.c in OpenSSL 1.0.1 before 1.0.1s and 1.0.2 before 1.0.2g allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via a malformed DSA private key.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-0705",
"url": "https://www.suse.com/security/cve/CVE-2016-0705"
},
{
"category": "external",
"summary": "SUSE Bug 968044 for CVE-2016-0705",
"url": "https://bugzilla.suse.com/968044"
},
{
"category": "external",
"summary": "SUSE Bug 968047 for CVE-2016-0705",
"url": "https://bugzilla.suse.com/968047"
},
{
"category": "external",
"summary": "SUSE Bug 971238 for CVE-2016-0705",
"url": "https://bugzilla.suse.com/971238"
},
{
"category": "external",
"summary": "SUSE Bug 976341 for CVE-2016-0705",
"url": "https://bugzilla.suse.com/976341"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-10-18T12:49:55Z",
"details": "low"
}
],
"title": "CVE-2016-0705"
},
{
"cve": "CVE-2017-3732",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-3732"
}
],
"notes": [
{
"category": "general",
"text": "There is a carry propagating bug in the x86_64 Montgomery squaring procedure in OpenSSL 1.0.2 before 1.0.2k and 1.1.0 before 1.1.0d. No EC algorithms are affected. Analysis suggests that attacks against RSA and DSA as a result of this defect would be very difficult to perform and are not believed likely. Attacks against DH are considered just feasible (although very difficult) because most of the work necessary to deduce information about a private key may be performed offline. The amount of resources required for such an attack would be very significant and likely only accessible to a limited number of attackers. An attacker would additionally need online access to an unpatched system using the target private key in a scenario with persistent DH parameters and a private key that is shared between multiple clients. For example this can occur by default in OpenSSL DHE based SSL/TLS ciphersuites. Note: This issue is very similar to CVE-2015-3193 but must be treated as a separate problem.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-3732",
"url": "https://www.suse.com/security/cve/CVE-2017-3732"
},
{
"category": "external",
"summary": "SUSE Bug 1021641 for CVE-2017-3732",
"url": "https://bugzilla.suse.com/1021641"
},
{
"category": "external",
"summary": "SUSE Bug 1022086 for CVE-2017-3732",
"url": "https://bugzilla.suse.com/1022086"
},
{
"category": "external",
"summary": "SUSE Bug 1049418 for CVE-2017-3732",
"url": "https://bugzilla.suse.com/1049418"
},
{
"category": "external",
"summary": "SUSE Bug 1049421 for CVE-2017-3732",
"url": "https://bugzilla.suse.com/1049421"
},
{
"category": "external",
"summary": "SUSE Bug 1049422 for CVE-2017-3732",
"url": "https://bugzilla.suse.com/1049422"
},
{
"category": "external",
"summary": "SUSE Bug 1066242 for CVE-2017-3732",
"url": "https://bugzilla.suse.com/1066242"
},
{
"category": "external",
"summary": "SUSE Bug 1071906 for CVE-2017-3732",
"url": "https://bugzilla.suse.com/1071906"
},
{
"category": "external",
"summary": "SUSE Bug 957814 for CVE-2017-3732",
"url": "https://bugzilla.suse.com/957814"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-10-18T12:49:55Z",
"details": "low"
}
],
"title": "CVE-2017-3732"
},
{
"cve": "CVE-2017-3736",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-3736"
}
],
"notes": [
{
"category": "general",
"text": "There is a carry propagating bug in the x86_64 Montgomery squaring procedure in OpenSSL before 1.0.2m and 1.1.0 before 1.1.0g. No EC algorithms are affected. Analysis suggests that attacks against RSA and DSA as a result of this defect would be very difficult to perform and are not believed likely. Attacks against DH are considered just feasible (although very difficult) because most of the work necessary to deduce information about a private key may be performed offline. The amount of resources required for such an attack would be very significant and likely only accessible to a limited number of attackers. An attacker would additionally need online access to an unpatched system using the target private key in a scenario with persistent DH parameters and a private key that is shared between multiple clients. This only affects processors that support the BMI1, BMI2 and ADX extensions like Intel Broadwell (5th generation) and later or AMD Ryzen.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-3736",
"url": "https://www.suse.com/security/cve/CVE-2017-3736"
},
{
"category": "external",
"summary": "SUSE Bug 1066242 for CVE-2017-3736",
"url": "https://bugzilla.suse.com/1066242"
},
{
"category": "external",
"summary": "SUSE Bug 1071906 for CVE-2017-3736",
"url": "https://bugzilla.suse.com/1071906"
},
{
"category": "external",
"summary": "SUSE Bug 1076369 for CVE-2017-3736",
"url": "https://bugzilla.suse.com/1076369"
},
{
"category": "external",
"summary": "SUSE Bug 957814 for CVE-2017-3736",
"url": "https://bugzilla.suse.com/957814"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.4,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-10-18T12:49:55Z",
"details": "moderate"
}
],
"title": "CVE-2017-3736"
},
{
"cve": "CVE-2018-12539",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-12539"
}
],
"notes": [
{
"category": "general",
"text": "In Eclipse OpenJ9 version 0.8, users other than the process owner may be able to use Java Attach API to connect to an Eclipse OpenJ9 or IBM JVM on the same machine and use Attach API operations, which includes the ability to execute untrusted native code. Attach API is enabled by default on Windows, Linux and AIX JVMs and can be disabled using the command line option -Dcom.ibm.tools.attach.enable=no.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-12539",
"url": "https://www.suse.com/security/cve/CVE-2018-12539"
},
{
"category": "external",
"summary": "SUSE Bug 1101645 for CVE-2018-12539",
"url": "https://bugzilla.suse.com/1101645"
},
{
"category": "external",
"summary": "SUSE Bug 1101656 for CVE-2018-12539",
"url": "https://bugzilla.suse.com/1101656"
},
{
"category": "external",
"summary": "SUSE Bug 1104668 for CVE-2018-12539",
"url": "https://bugzilla.suse.com/1104668"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.4,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-10-18T12:49:55Z",
"details": "moderate"
}
],
"title": "CVE-2018-12539"
},
{
"cve": "CVE-2018-1517",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-1517"
}
],
"notes": [
{
"category": "general",
"text": "A flaw in the java.math component in IBM SDK, Java Technology Edition 6.0, 7.0, and 8.0 may allow an attacker to inflict a denial-of-service attack with specially crafted String data. IBM X-Force ID: 141681.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-1517",
"url": "https://www.suse.com/security/cve/CVE-2018-1517"
},
{
"category": "external",
"summary": "SUSE Bug 1101645 for CVE-2018-1517",
"url": "https://bugzilla.suse.com/1101645"
},
{
"category": "external",
"summary": "SUSE Bug 1101656 for CVE-2018-1517",
"url": "https://bugzilla.suse.com/1101656"
},
{
"category": "external",
"summary": "SUSE Bug 1104668 for CVE-2018-1517",
"url": "https://bugzilla.suse.com/1104668"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-10-18T12:49:55Z",
"details": "moderate"
}
],
"title": "CVE-2018-1517"
},
{
"cve": "CVE-2018-1656",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-1656"
}
],
"notes": [
{
"category": "general",
"text": "The IBM Java Runtime Environment\u0027s Diagnostic Tooling Framework for Java (DTFJ) (IBM SDK, Java Technology Edition 6.0 , 7.0, and 8.0) does not protect against path traversal attacks when extracting compressed dump files. IBM X-Force ID: 144882.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-1656",
"url": "https://www.suse.com/security/cve/CVE-2018-1656"
},
{
"category": "external",
"summary": "SUSE Bug 1101645 for CVE-2018-1656",
"url": "https://bugzilla.suse.com/1101645"
},
{
"category": "external",
"summary": "SUSE Bug 1101656 for CVE-2018-1656",
"url": "https://bugzilla.suse.com/1101656"
},
{
"category": "external",
"summary": "SUSE Bug 1104668 for CVE-2018-1656",
"url": "https://bugzilla.suse.com/1104668"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.4,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:N",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-10-18T12:49:55Z",
"details": "moderate"
}
],
"title": "CVE-2018-1656"
},
{
"cve": "CVE-2018-2940",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-2940"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries). Supported versions that are affected are Java SE: 6u191, 7u181, 8u172 and 10.0.1; Java SE Embedded: 8u171. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 4.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-2940",
"url": "https://www.suse.com/security/cve/CVE-2018-2940"
},
{
"category": "external",
"summary": "SUSE Bug 1101645 for CVE-2018-2940",
"url": "https://bugzilla.suse.com/1101645"
},
{
"category": "external",
"summary": "SUSE Bug 1101656 for CVE-2018-2940",
"url": "https://bugzilla.suse.com/1101656"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-10-18T12:49:55Z",
"details": "moderate"
}
],
"title": "CVE-2018-2940"
},
{
"cve": "CVE-2018-2952",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-2952"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Concurrency). Supported versions that are affected are Java SE: 6u191, 7u181, 8u172 and 10.0.1; Java SE Embedded: 8u171; JRockit: R28.3.18. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 3.7 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-2952",
"url": "https://www.suse.com/security/cve/CVE-2018-2952"
},
{
"category": "external",
"summary": "SUSE Bug 1101645 for CVE-2018-2952",
"url": "https://bugzilla.suse.com/1101645"
},
{
"category": "external",
"summary": "SUSE Bug 1101651 for CVE-2018-2952",
"url": "https://bugzilla.suse.com/1101651"
},
{
"category": "external",
"summary": "SUSE Bug 1101656 for CVE-2018-2952",
"url": "https://bugzilla.suse.com/1101656"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-10-18T12:49:55Z",
"details": "moderate"
}
],
"title": "CVE-2018-2952"
},
{
"cve": "CVE-2018-2964",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-2964"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Deployment). Supported versions that are affected are Java SE: 8u172 and 10.0.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 8.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-2964",
"url": "https://www.suse.com/security/cve/CVE-2018-2964"
},
{
"category": "external",
"summary": "SUSE Bug 1101645 for CVE-2018-2964",
"url": "https://bugzilla.suse.com/1101645"
},
{
"category": "external",
"summary": "SUSE Bug 1101653 for CVE-2018-2964",
"url": "https://bugzilla.suse.com/1101653"
},
{
"category": "external",
"summary": "SUSE Bug 1101656 for CVE-2018-2964",
"url": "https://bugzilla.suse.com/1101656"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.3,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-10-18T12:49:55Z",
"details": "moderate"
}
],
"title": "CVE-2018-2964"
},
{
"cve": "CVE-2018-2973",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-2973"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: JSSE). Supported versions that are affected are Java SE: 6u191, 7u181, 8u172 and 10.0.1; Java SE Embedded: 8u171. Difficult to exploit vulnerability allows unauthenticated attacker with network access via SSL/TLS to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 5.9 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-2973",
"url": "https://www.suse.com/security/cve/CVE-2018-2973"
},
{
"category": "external",
"summary": "SUSE Bug 1101645 for CVE-2018-2973",
"url": "https://bugzilla.suse.com/1101645"
},
{
"category": "external",
"summary": "SUSE Bug 1101656 for CVE-2018-2973",
"url": "https://bugzilla.suse.com/1101656"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-alsa-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-devel-1.8.0_sr5.20-30.36.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-plugin-1.8.0_sr5.20-30.36.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-10-18T12:49:55Z",
"details": "moderate"
}
],
"title": "CVE-2018-2973"
}
]
}
suse-su-2018:3064-1
Vulnerability from csaf_suse
Published
2018-10-08 05:42
Modified
2018-10-08 05:42
Summary
Security update for java-1_8_0-openjdk
Notes
Title of the patch
Security update for java-1_8_0-openjdk
Description of the patch
This update for java-1_8_0-openjdk to the jdk8u181 (icedtea 3.9.0) release fixes the following issues:
These security issues were fixed:
- CVE-2018-2938: Difficult to exploit vulnerability allowed unauthenticated
attacker with network access via multiple protocols to compromise Java SE.
Successful attacks of this vulnerability can result in takeover of Java SE
(bsc#1101644).
- CVE-2018-2940: Vulnerability in subcomponent: Libraries. Easily exploitable
vulnerability allowed unauthenticated attacker with network access via multiple
protocols to compromise Java SE, Java SE Embedded. Successful attacks require
human interaction from a person other than the attacker. Successful attacks of
this vulnerability can result in unauthorized read access to a subset of Java
SE, Java SE Embedded accessible data (bsc#1101645)
- CVE-2018-2952: Vulnerability in subcomponent: Concurrency. Difficult to
exploit vulnerability allowed unauthenticated attacker with network access via
multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful
attacks of this vulnerability can result in unauthorized ability to cause a
partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit
(bsc#1101651)
- CVE-2018-2973: Vulnerability in subcomponent: JSSE. Difficult to exploit
vulnerability allowed unauthenticated attacker with network access via SSL/TLS
to compromise Java SE, Java SE Embedded. Successful attacks of this
vulnerability can result in unauthorized creation, deletion or modification
access to critical data or all Java SE, Java SE Embedded accessible data
(bsc#1101656)
These non-security issues were fixed:
- Improve desktop file usage
- Better Internet address support
- speculative traps break when classes are redefined
- sun/security/pkcs11/ec/ReadCertificates.java fails intermittently
- Clean up code that saves the previous versions of redefined classes
- Prevent SIGSEGV in ReceiverTypeData::clean_weak_klass_links
- RedefineClasses() tests fail assert(((Metadata*)obj)->is_valid()) failed: obj is valid
- NMT is not enabled if NMT option is specified after class path specifiers
- EndEntityChecker should not process custom extensions after PKIX validation
- SupportedDSAParamGen.java failed with timeout
- Montgomery multiply intrinsic should use correct name
- When determining the ciphersuite lists, there is no debug output for disabled suites.
- sun/security/mscapi/SignedObjectChain.java fails on Windows
- On Windows Swing changes keyboard layout on a window activation
- IfNode::range_check_trap_proj() should handler dying subgraph with single if proj
- Even better Internet address support
- Newlines in JAXB string values of SOAP-requests are escaped to '
'
- TestFlushableGZIPOutputStream failing with IndexOutOfBoundsException
- Unable to use JDWP API in JDK 8 to debug JDK 9 VM
- Hotspot crash on Cassandra 3.11.1 startup with libnuma 2.0.3
- Performance drop with Java JDK 1.8.0_162-b32
- Upgrade time-zone data to tzdata2018d
- Fix potential crash in BufImg_SetupICM
- JDK 8u181 l10n resource file update
- Remove debug print statements from RMI fix
- (tz) Upgrade time-zone data to tzdata2018e
- ObjectInputStream filterCheck method throws NullPointerException
- adjust reflective access checks
Patchnames
SUSE-OpenStack-Cloud-7-2018-2168,SUSE-SLE-DESKTOP-12-SP3-2018-2168,SUSE-SLE-SAP-12-SP2-2018-2168,SUSE-SLE-SERVER-12-SP1-2018-2168,SUSE-SLE-SERVER-12-SP2-2018-2168,SUSE-SLE-SERVER-12-SP3-2018-2168,SUSE-Storage-4-2018-2168
Terms of use
CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for java-1_8_0-openjdk",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This update for java-1_8_0-openjdk to the jdk8u181 (icedtea 3.9.0) release fixes the following issues:\n\nThese security issues were fixed:\n\n- CVE-2018-2938: Difficult to exploit vulnerability allowed unauthenticated\n attacker with network access via multiple protocols to compromise Java SE.\n Successful attacks of this vulnerability can result in takeover of Java SE\n (bsc#1101644).\n- CVE-2018-2940: Vulnerability in subcomponent: Libraries. Easily exploitable\n vulnerability allowed unauthenticated attacker with network access via multiple\n protocols to compromise Java SE, Java SE Embedded. Successful attacks require\n human interaction from a person other than the attacker. Successful attacks of\n this vulnerability can result in unauthorized read access to a subset of Java\n SE, Java SE Embedded accessible data (bsc#1101645)\n- CVE-2018-2952: Vulnerability in subcomponent: Concurrency. Difficult to\n exploit vulnerability allowed unauthenticated attacker with network access via\n multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful\n attacks of this vulnerability can result in unauthorized ability to cause a\n partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit\n (bsc#1101651)\n- CVE-2018-2973: Vulnerability in subcomponent: JSSE. Difficult to exploit\n vulnerability allowed unauthenticated attacker with network access via SSL/TLS\n to compromise Java SE, Java SE Embedded. Successful attacks of this\n vulnerability can result in unauthorized creation, deletion or modification\n access to critical data or all Java SE, Java SE Embedded accessible data\n (bsc#1101656)\n\nThese non-security issues were fixed:\n\n- Improve desktop file usage\n- Better Internet address support\n- speculative traps break when classes are redefined\n- sun/security/pkcs11/ec/ReadCertificates.java fails intermittently\n- Clean up code that saves the previous versions of redefined classes\n- Prevent SIGSEGV in ReceiverTypeData::clean_weak_klass_links\n- RedefineClasses() tests fail assert(((Metadata*)obj)-\u003eis_valid()) failed: obj is valid\n- NMT is not enabled if NMT option is specified after class path specifiers\n- EndEntityChecker should not process custom extensions after PKIX validation\n- SupportedDSAParamGen.java failed with timeout\n- Montgomery multiply intrinsic should use correct name\n- When determining the ciphersuite lists, there is no debug output for disabled suites.\n- sun/security/mscapi/SignedObjectChain.java fails on Windows\n- On Windows Swing changes keyboard layout on a window activation\n- IfNode::range_check_trap_proj() should handler dying subgraph with single if proj\n- Even better Internet address support\n- Newlines in JAXB string values of SOAP-requests are escaped to \u0027\u0026#xa;\u0027\n- TestFlushableGZIPOutputStream failing with IndexOutOfBoundsException\n- Unable to use JDWP API in JDK 8 to debug JDK 9 VM\n- Hotspot crash on Cassandra 3.11.1 startup with libnuma 2.0.3\n- Performance drop with Java JDK 1.8.0_162-b32\n- Upgrade time-zone data to tzdata2018d\n- Fix potential crash in BufImg_SetupICM\n- JDK 8u181 l10n resource file update\n- Remove debug print statements from RMI fix\n- (tz) Upgrade time-zone data to tzdata2018e\n- ObjectInputStream filterCheck method throws NullPointerException\n- adjust reflective access checks\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "SUSE-OpenStack-Cloud-7-2018-2168,SUSE-SLE-DESKTOP-12-SP3-2018-2168,SUSE-SLE-SAP-12-SP2-2018-2168,SUSE-SLE-SERVER-12-SP1-2018-2168,SUSE-SLE-SERVER-12-SP2-2018-2168,SUSE-SLE-SERVER-12-SP3-2018-2168,SUSE-Storage-4-2018-2168",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2018_3064-1.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2018:3064-1",
"url": "https://www.suse.com/support/update/announcement/2018/suse-su-20183064-1/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2018:3064-1",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2018-October/004649.html"
},
{
"category": "self",
"summary": "SUSE Bug 1101644",
"url": "https://bugzilla.suse.com/1101644"
},
{
"category": "self",
"summary": "SUSE Bug 1101645",
"url": "https://bugzilla.suse.com/1101645"
},
{
"category": "self",
"summary": "SUSE Bug 1101651",
"url": "https://bugzilla.suse.com/1101651"
},
{
"category": "self",
"summary": "SUSE Bug 1101656",
"url": "https://bugzilla.suse.com/1101656"
},
{
"category": "self",
"summary": "SUSE Bug 1106812",
"url": "https://bugzilla.suse.com/1106812"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-2938 page",
"url": "https://www.suse.com/security/cve/CVE-2018-2938/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-2940 page",
"url": "https://www.suse.com/security/cve/CVE-2018-2940/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-2952 page",
"url": "https://www.suse.com/security/cve/CVE-2018-2952/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-2973 page",
"url": "https://www.suse.com/security/cve/CVE-2018-2973/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-3639 page",
"url": "https://www.suse.com/security/cve/CVE-2018-3639/"
}
],
"title": "Security update for java-1_8_0-openjdk",
"tracking": {
"current_release_date": "2018-10-08T05:42:59Z",
"generator": {
"date": "2018-10-08T05:42:59Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2018:3064-1",
"initial_release_date": "2018-10-08T05:42:59Z",
"revision_history": [
{
"date": "2018-10-08T05:42:59Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "java-1_8_0-openjdk-1.8.0.181-27.26.2.aarch64",
"product": {
"name": "java-1_8_0-openjdk-1.8.0.181-27.26.2.aarch64",
"product_id": "java-1_8_0-openjdk-1.8.0.181-27.26.2.aarch64"
}
},
{
"category": "product_version",
"name": "java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.aarch64",
"product": {
"name": "java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.aarch64",
"product_id": "java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.aarch64"
}
},
{
"category": "product_version",
"name": "java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.aarch64",
"product": {
"name": "java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.aarch64",
"product_id": "java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.aarch64"
}
},
{
"category": "product_version",
"name": "java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.aarch64",
"product": {
"name": "java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.aarch64",
"product_id": "java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.aarch64"
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "java-1_8_0-openjdk-1.8.0.181-27.26.2.ppc64le",
"product": {
"name": "java-1_8_0-openjdk-1.8.0.181-27.26.2.ppc64le",
"product_id": "java-1_8_0-openjdk-1.8.0.181-27.26.2.ppc64le"
}
},
{
"category": "product_version",
"name": "java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.ppc64le",
"product": {
"name": "java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.ppc64le",
"product_id": "java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.ppc64le"
}
},
{
"category": "product_version",
"name": "java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.ppc64le",
"product": {
"name": "java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.ppc64le",
"product_id": "java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.ppc64le"
}
},
{
"category": "product_version",
"name": "java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.ppc64le",
"product": {
"name": "java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.ppc64le",
"product_id": "java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.ppc64le"
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "java-1_8_0-openjdk-1.8.0.181-27.26.2.s390x",
"product": {
"name": "java-1_8_0-openjdk-1.8.0.181-27.26.2.s390x",
"product_id": "java-1_8_0-openjdk-1.8.0.181-27.26.2.s390x"
}
},
{
"category": "product_version",
"name": "java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.s390x",
"product": {
"name": "java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.s390x",
"product_id": "java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.s390x"
}
},
{
"category": "product_version",
"name": "java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.s390x",
"product": {
"name": "java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.s390x",
"product_id": "java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.s390x"
}
},
{
"category": "product_version",
"name": "java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.s390x",
"product": {
"name": "java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.s390x",
"product_id": "java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "java-1_8_0-openjdk-1.8.0.181-27.26.2.x86_64",
"product": {
"name": "java-1_8_0-openjdk-1.8.0.181-27.26.2.x86_64",
"product_id": "java-1_8_0-openjdk-1.8.0.181-27.26.2.x86_64"
}
},
{
"category": "product_version",
"name": "java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.x86_64",
"product": {
"name": "java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.x86_64",
"product_id": "java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.x86_64"
}
},
{
"category": "product_version",
"name": "java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.x86_64",
"product": {
"name": "java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.x86_64",
"product_id": "java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.x86_64"
}
},
{
"category": "product_version",
"name": "java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.x86_64",
"product": {
"name": "java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.x86_64",
"product_id": "java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE OpenStack Cloud 7",
"product": {
"name": "SUSE OpenStack Cloud 7",
"product_id": "SUSE OpenStack Cloud 7",
"product_identification_helper": {
"cpe": "cpe:/o:suse:suse-openstack-cloud:7"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Desktop 12 SP3",
"product": {
"name": "SUSE Linux Enterprise Desktop 12 SP3",
"product_id": "SUSE Linux Enterprise Desktop 12 SP3",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sled:12:sp3"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server for SAP Applications 12 SP2",
"product": {
"name": "SUSE Linux Enterprise Server for SAP Applications 12 SP2",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP2",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles_sap:12:sp2"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 12 SP1-LTSS",
"product": {
"name": "SUSE Linux Enterprise Server 12 SP1-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP1-LTSS",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles-ltss:12:sp1"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 12 SP2-LTSS",
"product": {
"name": "SUSE Linux Enterprise Server 12 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP2-LTSS",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles-ltss:12:sp2"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 12 SP3",
"product": {
"name": "SUSE Linux Enterprise Server 12 SP3",
"product_id": "SUSE Linux Enterprise Server 12 SP3",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles:12:sp3"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server for SAP Applications 12 SP3",
"product": {
"name": "SUSE Linux Enterprise Server for SAP Applications 12 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP3",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles_sap:12:sp3"
}
}
},
{
"category": "product_name",
"name": "SUSE Enterprise Storage 4",
"product": {
"name": "SUSE Enterprise Storage 4",
"product_id": "SUSE Enterprise Storage 4",
"product_identification_helper": {
"cpe": "cpe:/o:suse:ses:4"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-1.8.0.181-27.26.2.s390x as component of SUSE OpenStack Cloud 7",
"product_id": "SUSE OpenStack Cloud 7:java-1_8_0-openjdk-1.8.0.181-27.26.2.s390x"
},
"product_reference": "java-1_8_0-openjdk-1.8.0.181-27.26.2.s390x",
"relates_to_product_reference": "SUSE OpenStack Cloud 7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-1.8.0.181-27.26.2.x86_64 as component of SUSE OpenStack Cloud 7",
"product_id": "SUSE OpenStack Cloud 7:java-1_8_0-openjdk-1.8.0.181-27.26.2.x86_64"
},
"product_reference": "java-1_8_0-openjdk-1.8.0.181-27.26.2.x86_64",
"relates_to_product_reference": "SUSE OpenStack Cloud 7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.s390x as component of SUSE OpenStack Cloud 7",
"product_id": "SUSE OpenStack Cloud 7:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.s390x"
},
"product_reference": "java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.s390x",
"relates_to_product_reference": "SUSE OpenStack Cloud 7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.x86_64 as component of SUSE OpenStack Cloud 7",
"product_id": "SUSE OpenStack Cloud 7:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.x86_64"
},
"product_reference": "java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.x86_64",
"relates_to_product_reference": "SUSE OpenStack Cloud 7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.s390x as component of SUSE OpenStack Cloud 7",
"product_id": "SUSE OpenStack Cloud 7:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.s390x"
},
"product_reference": "java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.s390x",
"relates_to_product_reference": "SUSE OpenStack Cloud 7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.x86_64 as component of SUSE OpenStack Cloud 7",
"product_id": "SUSE OpenStack Cloud 7:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.x86_64"
},
"product_reference": "java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.x86_64",
"relates_to_product_reference": "SUSE OpenStack Cloud 7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.s390x as component of SUSE OpenStack Cloud 7",
"product_id": "SUSE OpenStack Cloud 7:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.s390x"
},
"product_reference": "java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.s390x",
"relates_to_product_reference": "SUSE OpenStack Cloud 7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.x86_64 as component of SUSE OpenStack Cloud 7",
"product_id": "SUSE OpenStack Cloud 7:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.x86_64"
},
"product_reference": "java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.x86_64",
"relates_to_product_reference": "SUSE OpenStack Cloud 7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-1.8.0.181-27.26.2.x86_64 as component of SUSE Linux Enterprise Desktop 12 SP3",
"product_id": "SUSE Linux Enterprise Desktop 12 SP3:java-1_8_0-openjdk-1.8.0.181-27.26.2.x86_64"
},
"product_reference": "java-1_8_0-openjdk-1.8.0.181-27.26.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Desktop 12 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.x86_64 as component of SUSE Linux Enterprise Desktop 12 SP3",
"product_id": "SUSE Linux Enterprise Desktop 12 SP3:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.x86_64"
},
"product_reference": "java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Desktop 12 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-1.8.0.181-27.26.2.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-1.8.0.181-27.26.2.ppc64le"
},
"product_reference": "java-1_8_0-openjdk-1.8.0.181-27.26.2.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-1.8.0.181-27.26.2.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-1.8.0.181-27.26.2.x86_64"
},
"product_reference": "java-1_8_0-openjdk-1.8.0.181-27.26.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.ppc64le"
},
"product_reference": "java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.x86_64"
},
"product_reference": "java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.ppc64le"
},
"product_reference": "java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.x86_64"
},
"product_reference": "java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.ppc64le"
},
"product_reference": "java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.x86_64"
},
"product_reference": "java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-1.8.0.181-27.26.2.ppc64le as component of SUSE Linux Enterprise Server 12 SP1-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-1.8.0.181-27.26.2.ppc64le"
},
"product_reference": "java-1_8_0-openjdk-1.8.0.181-27.26.2.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-1.8.0.181-27.26.2.s390x as component of SUSE Linux Enterprise Server 12 SP1-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-1.8.0.181-27.26.2.s390x"
},
"product_reference": "java-1_8_0-openjdk-1.8.0.181-27.26.2.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-1.8.0.181-27.26.2.x86_64 as component of SUSE Linux Enterprise Server 12 SP1-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-1.8.0.181-27.26.2.x86_64"
},
"product_reference": "java-1_8_0-openjdk-1.8.0.181-27.26.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.ppc64le as component of SUSE Linux Enterprise Server 12 SP1-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.ppc64le"
},
"product_reference": "java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.s390x as component of SUSE Linux Enterprise Server 12 SP1-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.s390x"
},
"product_reference": "java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.x86_64 as component of SUSE Linux Enterprise Server 12 SP1-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.x86_64"
},
"product_reference": "java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.ppc64le as component of SUSE Linux Enterprise Server 12 SP1-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.ppc64le"
},
"product_reference": "java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.s390x as component of SUSE Linux Enterprise Server 12 SP1-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.s390x"
},
"product_reference": "java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.x86_64 as component of SUSE Linux Enterprise Server 12 SP1-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.x86_64"
},
"product_reference": "java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.ppc64le as component of SUSE Linux Enterprise Server 12 SP1-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.ppc64le"
},
"product_reference": "java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.s390x as component of SUSE Linux Enterprise Server 12 SP1-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.s390x"
},
"product_reference": "java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.x86_64 as component of SUSE Linux Enterprise Server 12 SP1-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.x86_64"
},
"product_reference": "java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-1.8.0.181-27.26.2.ppc64le as component of SUSE Linux Enterprise Server 12 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-1.8.0.181-27.26.2.ppc64le"
},
"product_reference": "java-1_8_0-openjdk-1.8.0.181-27.26.2.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-1.8.0.181-27.26.2.s390x as component of SUSE Linux Enterprise Server 12 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-1.8.0.181-27.26.2.s390x"
},
"product_reference": "java-1_8_0-openjdk-1.8.0.181-27.26.2.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-1.8.0.181-27.26.2.x86_64 as component of SUSE Linux Enterprise Server 12 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-1.8.0.181-27.26.2.x86_64"
},
"product_reference": "java-1_8_0-openjdk-1.8.0.181-27.26.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.ppc64le as component of SUSE Linux Enterprise Server 12 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.ppc64le"
},
"product_reference": "java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.s390x as component of SUSE Linux Enterprise Server 12 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.s390x"
},
"product_reference": "java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.x86_64 as component of SUSE Linux Enterprise Server 12 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.x86_64"
},
"product_reference": "java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.ppc64le as component of SUSE Linux Enterprise Server 12 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.ppc64le"
},
"product_reference": "java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.s390x as component of SUSE Linux Enterprise Server 12 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.s390x"
},
"product_reference": "java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.x86_64 as component of SUSE Linux Enterprise Server 12 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.x86_64"
},
"product_reference": "java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.ppc64le as component of SUSE Linux Enterprise Server 12 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.ppc64le"
},
"product_reference": "java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.s390x as component of SUSE Linux Enterprise Server 12 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.s390x"
},
"product_reference": "java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.x86_64 as component of SUSE Linux Enterprise Server 12 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.x86_64"
},
"product_reference": "java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-1.8.0.181-27.26.2.aarch64 as component of SUSE Linux Enterprise Server 12 SP3",
"product_id": "SUSE Linux Enterprise Server 12 SP3:java-1_8_0-openjdk-1.8.0.181-27.26.2.aarch64"
},
"product_reference": "java-1_8_0-openjdk-1.8.0.181-27.26.2.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-1.8.0.181-27.26.2.ppc64le as component of SUSE Linux Enterprise Server 12 SP3",
"product_id": "SUSE Linux Enterprise Server 12 SP3:java-1_8_0-openjdk-1.8.0.181-27.26.2.ppc64le"
},
"product_reference": "java-1_8_0-openjdk-1.8.0.181-27.26.2.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-1.8.0.181-27.26.2.s390x as component of SUSE Linux Enterprise Server 12 SP3",
"product_id": "SUSE Linux Enterprise Server 12 SP3:java-1_8_0-openjdk-1.8.0.181-27.26.2.s390x"
},
"product_reference": "java-1_8_0-openjdk-1.8.0.181-27.26.2.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-1.8.0.181-27.26.2.x86_64 as component of SUSE Linux Enterprise Server 12 SP3",
"product_id": "SUSE Linux Enterprise Server 12 SP3:java-1_8_0-openjdk-1.8.0.181-27.26.2.x86_64"
},
"product_reference": "java-1_8_0-openjdk-1.8.0.181-27.26.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.aarch64 as component of SUSE Linux Enterprise Server 12 SP3",
"product_id": "SUSE Linux Enterprise Server 12 SP3:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.aarch64"
},
"product_reference": "java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.ppc64le as component of SUSE Linux Enterprise Server 12 SP3",
"product_id": "SUSE Linux Enterprise Server 12 SP3:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.ppc64le"
},
"product_reference": "java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.s390x as component of SUSE Linux Enterprise Server 12 SP3",
"product_id": "SUSE Linux Enterprise Server 12 SP3:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.s390x"
},
"product_reference": "java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.x86_64 as component of SUSE Linux Enterprise Server 12 SP3",
"product_id": "SUSE Linux Enterprise Server 12 SP3:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.x86_64"
},
"product_reference": "java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.aarch64 as component of SUSE Linux Enterprise Server 12 SP3",
"product_id": "SUSE Linux Enterprise Server 12 SP3:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.aarch64"
},
"product_reference": "java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.ppc64le as component of SUSE Linux Enterprise Server 12 SP3",
"product_id": "SUSE Linux Enterprise Server 12 SP3:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.ppc64le"
},
"product_reference": "java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.s390x as component of SUSE Linux Enterprise Server 12 SP3",
"product_id": "SUSE Linux Enterprise Server 12 SP3:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.s390x"
},
"product_reference": "java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.x86_64 as component of SUSE Linux Enterprise Server 12 SP3",
"product_id": "SUSE Linux Enterprise Server 12 SP3:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.x86_64"
},
"product_reference": "java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.aarch64 as component of SUSE Linux Enterprise Server 12 SP3",
"product_id": "SUSE Linux Enterprise Server 12 SP3:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.aarch64"
},
"product_reference": "java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.ppc64le as component of SUSE Linux Enterprise Server 12 SP3",
"product_id": "SUSE Linux Enterprise Server 12 SP3:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.ppc64le"
},
"product_reference": "java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.s390x as component of SUSE Linux Enterprise Server 12 SP3",
"product_id": "SUSE Linux Enterprise Server 12 SP3:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.s390x"
},
"product_reference": "java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.x86_64 as component of SUSE Linux Enterprise Server 12 SP3",
"product_id": "SUSE Linux Enterprise Server 12 SP3:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.x86_64"
},
"product_reference": "java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-1.8.0.181-27.26.2.aarch64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-1.8.0.181-27.26.2.aarch64"
},
"product_reference": "java-1_8_0-openjdk-1.8.0.181-27.26.2.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-1.8.0.181-27.26.2.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-1.8.0.181-27.26.2.ppc64le"
},
"product_reference": "java-1_8_0-openjdk-1.8.0.181-27.26.2.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-1.8.0.181-27.26.2.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-1.8.0.181-27.26.2.s390x"
},
"product_reference": "java-1_8_0-openjdk-1.8.0.181-27.26.2.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-1.8.0.181-27.26.2.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-1.8.0.181-27.26.2.x86_64"
},
"product_reference": "java-1_8_0-openjdk-1.8.0.181-27.26.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.aarch64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.aarch64"
},
"product_reference": "java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.ppc64le"
},
"product_reference": "java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.s390x"
},
"product_reference": "java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.x86_64"
},
"product_reference": "java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.aarch64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.aarch64"
},
"product_reference": "java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.ppc64le"
},
"product_reference": "java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.s390x"
},
"product_reference": "java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.x86_64"
},
"product_reference": "java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.aarch64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.aarch64"
},
"product_reference": "java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.ppc64le"
},
"product_reference": "java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.s390x"
},
"product_reference": "java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.x86_64"
},
"product_reference": "java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-1.8.0.181-27.26.2.x86_64 as component of SUSE Enterprise Storage 4",
"product_id": "SUSE Enterprise Storage 4:java-1_8_0-openjdk-1.8.0.181-27.26.2.x86_64"
},
"product_reference": "java-1_8_0-openjdk-1.8.0.181-27.26.2.x86_64",
"relates_to_product_reference": "SUSE Enterprise Storage 4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.x86_64 as component of SUSE Enterprise Storage 4",
"product_id": "SUSE Enterprise Storage 4:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.x86_64"
},
"product_reference": "java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.x86_64",
"relates_to_product_reference": "SUSE Enterprise Storage 4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.x86_64 as component of SUSE Enterprise Storage 4",
"product_id": "SUSE Enterprise Storage 4:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.x86_64"
},
"product_reference": "java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.x86_64",
"relates_to_product_reference": "SUSE Enterprise Storage 4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.x86_64 as component of SUSE Enterprise Storage 4",
"product_id": "SUSE Enterprise Storage 4:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.x86_64"
},
"product_reference": "java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.x86_64",
"relates_to_product_reference": "SUSE Enterprise Storage 4"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2018-2938",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-2938"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Java DB). Supported versions that are affected are Java SE: 6u191, 7u181 and 8u172. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. While the vulnerability is in Java SE, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVE-2018-2938 addresses CVE-2018-1313. CVSS 3.0 Base Score 9.0 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Enterprise Storage 4:java-1_8_0-openjdk-1.8.0.181-27.26.2.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Desktop 12 SP3:java-1_8_0-openjdk-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Desktop 12 SP3:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-1.8.0.181-27.26.2.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-1.8.0.181-27.26.2.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-openjdk-1.8.0.181-27.26.2.aarch64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-openjdk-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-openjdk-1.8.0.181-27.26.2.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-openjdk-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.aarch64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.aarch64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.aarch64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-1.8.0.181-27.26.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-1.8.0.181-27.26.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-1.8.0.181-27.26.2.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-1.8.0.181-27.26.2.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-2938",
"url": "https://www.suse.com/security/cve/CVE-2018-2938"
},
{
"category": "external",
"summary": "SUSE Bug 1101644 for CVE-2018-2938",
"url": "https://bugzilla.suse.com/1101644"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Enterprise Storage 4:java-1_8_0-openjdk-1.8.0.181-27.26.2.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Desktop 12 SP3:java-1_8_0-openjdk-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Desktop 12 SP3:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-1.8.0.181-27.26.2.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-1.8.0.181-27.26.2.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-openjdk-1.8.0.181-27.26.2.aarch64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-openjdk-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-openjdk-1.8.0.181-27.26.2.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-openjdk-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.aarch64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.aarch64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.aarch64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-1.8.0.181-27.26.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-1.8.0.181-27.26.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-1.8.0.181-27.26.2.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-1.8.0.181-27.26.2.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"SUSE Enterprise Storage 4:java-1_8_0-openjdk-1.8.0.181-27.26.2.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Desktop 12 SP3:java-1_8_0-openjdk-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Desktop 12 SP3:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-1.8.0.181-27.26.2.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-1.8.0.181-27.26.2.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-openjdk-1.8.0.181-27.26.2.aarch64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-openjdk-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-openjdk-1.8.0.181-27.26.2.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-openjdk-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.aarch64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.aarch64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.aarch64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-1.8.0.181-27.26.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-1.8.0.181-27.26.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-1.8.0.181-27.26.2.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-1.8.0.181-27.26.2.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-10-08T05:42:59Z",
"details": "important"
}
],
"title": "CVE-2018-2938"
},
{
"cve": "CVE-2018-2940",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-2940"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries). Supported versions that are affected are Java SE: 6u191, 7u181, 8u172 and 10.0.1; Java SE Embedded: 8u171. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 4.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Enterprise Storage 4:java-1_8_0-openjdk-1.8.0.181-27.26.2.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Desktop 12 SP3:java-1_8_0-openjdk-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Desktop 12 SP3:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-1.8.0.181-27.26.2.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-1.8.0.181-27.26.2.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-openjdk-1.8.0.181-27.26.2.aarch64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-openjdk-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-openjdk-1.8.0.181-27.26.2.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-openjdk-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.aarch64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.aarch64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.aarch64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-1.8.0.181-27.26.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-1.8.0.181-27.26.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-1.8.0.181-27.26.2.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-1.8.0.181-27.26.2.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-2940",
"url": "https://www.suse.com/security/cve/CVE-2018-2940"
},
{
"category": "external",
"summary": "SUSE Bug 1101645 for CVE-2018-2940",
"url": "https://bugzilla.suse.com/1101645"
},
{
"category": "external",
"summary": "SUSE Bug 1101656 for CVE-2018-2940",
"url": "https://bugzilla.suse.com/1101656"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Enterprise Storage 4:java-1_8_0-openjdk-1.8.0.181-27.26.2.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Desktop 12 SP3:java-1_8_0-openjdk-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Desktop 12 SP3:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-1.8.0.181-27.26.2.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-1.8.0.181-27.26.2.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-openjdk-1.8.0.181-27.26.2.aarch64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-openjdk-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-openjdk-1.8.0.181-27.26.2.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-openjdk-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.aarch64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.aarch64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.aarch64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-1.8.0.181-27.26.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-1.8.0.181-27.26.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-1.8.0.181-27.26.2.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-1.8.0.181-27.26.2.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"SUSE Enterprise Storage 4:java-1_8_0-openjdk-1.8.0.181-27.26.2.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Desktop 12 SP3:java-1_8_0-openjdk-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Desktop 12 SP3:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-1.8.0.181-27.26.2.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-1.8.0.181-27.26.2.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-openjdk-1.8.0.181-27.26.2.aarch64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-openjdk-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-openjdk-1.8.0.181-27.26.2.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-openjdk-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.aarch64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.aarch64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.aarch64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-1.8.0.181-27.26.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-1.8.0.181-27.26.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-1.8.0.181-27.26.2.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-1.8.0.181-27.26.2.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-10-08T05:42:59Z",
"details": "moderate"
}
],
"title": "CVE-2018-2940"
},
{
"cve": "CVE-2018-2952",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-2952"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Concurrency). Supported versions that are affected are Java SE: 6u191, 7u181, 8u172 and 10.0.1; Java SE Embedded: 8u171; JRockit: R28.3.18. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 3.7 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Enterprise Storage 4:java-1_8_0-openjdk-1.8.0.181-27.26.2.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Desktop 12 SP3:java-1_8_0-openjdk-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Desktop 12 SP3:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-1.8.0.181-27.26.2.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-1.8.0.181-27.26.2.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-openjdk-1.8.0.181-27.26.2.aarch64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-openjdk-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-openjdk-1.8.0.181-27.26.2.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-openjdk-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.aarch64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.aarch64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.aarch64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-1.8.0.181-27.26.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-1.8.0.181-27.26.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-1.8.0.181-27.26.2.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-1.8.0.181-27.26.2.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-2952",
"url": "https://www.suse.com/security/cve/CVE-2018-2952"
},
{
"category": "external",
"summary": "SUSE Bug 1101645 for CVE-2018-2952",
"url": "https://bugzilla.suse.com/1101645"
},
{
"category": "external",
"summary": "SUSE Bug 1101651 for CVE-2018-2952",
"url": "https://bugzilla.suse.com/1101651"
},
{
"category": "external",
"summary": "SUSE Bug 1101656 for CVE-2018-2952",
"url": "https://bugzilla.suse.com/1101656"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Enterprise Storage 4:java-1_8_0-openjdk-1.8.0.181-27.26.2.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Desktop 12 SP3:java-1_8_0-openjdk-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Desktop 12 SP3:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-1.8.0.181-27.26.2.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-1.8.0.181-27.26.2.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-openjdk-1.8.0.181-27.26.2.aarch64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-openjdk-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-openjdk-1.8.0.181-27.26.2.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-openjdk-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.aarch64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.aarch64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.aarch64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-1.8.0.181-27.26.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-1.8.0.181-27.26.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-1.8.0.181-27.26.2.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-1.8.0.181-27.26.2.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"SUSE Enterprise Storage 4:java-1_8_0-openjdk-1.8.0.181-27.26.2.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Desktop 12 SP3:java-1_8_0-openjdk-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Desktop 12 SP3:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-1.8.0.181-27.26.2.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-1.8.0.181-27.26.2.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-openjdk-1.8.0.181-27.26.2.aarch64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-openjdk-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-openjdk-1.8.0.181-27.26.2.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-openjdk-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.aarch64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.aarch64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.aarch64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-1.8.0.181-27.26.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-1.8.0.181-27.26.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-1.8.0.181-27.26.2.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-1.8.0.181-27.26.2.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-10-08T05:42:59Z",
"details": "important"
}
],
"title": "CVE-2018-2952"
},
{
"cve": "CVE-2018-2973",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-2973"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: JSSE). Supported versions that are affected are Java SE: 6u191, 7u181, 8u172 and 10.0.1; Java SE Embedded: 8u171. Difficult to exploit vulnerability allows unauthenticated attacker with network access via SSL/TLS to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 5.9 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Enterprise Storage 4:java-1_8_0-openjdk-1.8.0.181-27.26.2.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Desktop 12 SP3:java-1_8_0-openjdk-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Desktop 12 SP3:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-1.8.0.181-27.26.2.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-1.8.0.181-27.26.2.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-openjdk-1.8.0.181-27.26.2.aarch64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-openjdk-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-openjdk-1.8.0.181-27.26.2.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-openjdk-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.aarch64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.aarch64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.aarch64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-1.8.0.181-27.26.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-1.8.0.181-27.26.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-1.8.0.181-27.26.2.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-1.8.0.181-27.26.2.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-2973",
"url": "https://www.suse.com/security/cve/CVE-2018-2973"
},
{
"category": "external",
"summary": "SUSE Bug 1101645 for CVE-2018-2973",
"url": "https://bugzilla.suse.com/1101645"
},
{
"category": "external",
"summary": "SUSE Bug 1101656 for CVE-2018-2973",
"url": "https://bugzilla.suse.com/1101656"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Enterprise Storage 4:java-1_8_0-openjdk-1.8.0.181-27.26.2.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Desktop 12 SP3:java-1_8_0-openjdk-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Desktop 12 SP3:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-1.8.0.181-27.26.2.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-1.8.0.181-27.26.2.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-openjdk-1.8.0.181-27.26.2.aarch64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-openjdk-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-openjdk-1.8.0.181-27.26.2.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-openjdk-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.aarch64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.aarch64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.aarch64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-1.8.0.181-27.26.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-1.8.0.181-27.26.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-1.8.0.181-27.26.2.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-1.8.0.181-27.26.2.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.0"
},
"products": [
"SUSE Enterprise Storage 4:java-1_8_0-openjdk-1.8.0.181-27.26.2.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Desktop 12 SP3:java-1_8_0-openjdk-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Desktop 12 SP3:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-1.8.0.181-27.26.2.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-1.8.0.181-27.26.2.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-openjdk-1.8.0.181-27.26.2.aarch64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-openjdk-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-openjdk-1.8.0.181-27.26.2.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-openjdk-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.aarch64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.aarch64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.aarch64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-1.8.0.181-27.26.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-1.8.0.181-27.26.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-1.8.0.181-27.26.2.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-1.8.0.181-27.26.2.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-10-08T05:42:59Z",
"details": "moderate"
}
],
"title": "CVE-2018-2973"
},
{
"cve": "CVE-2018-3639",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-3639"
}
],
"notes": [
{
"category": "general",
"text": "Systems with microprocessors utilizing speculative execution and speculative execution of memory reads before the addresses of all prior memory writes are known may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis, aka Speculative Store Bypass (SSB), Variant 4.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Enterprise Storage 4:java-1_8_0-openjdk-1.8.0.181-27.26.2.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Desktop 12 SP3:java-1_8_0-openjdk-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Desktop 12 SP3:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-1.8.0.181-27.26.2.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-1.8.0.181-27.26.2.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-openjdk-1.8.0.181-27.26.2.aarch64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-openjdk-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-openjdk-1.8.0.181-27.26.2.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-openjdk-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.aarch64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.aarch64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.aarch64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-1.8.0.181-27.26.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-1.8.0.181-27.26.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-1.8.0.181-27.26.2.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-1.8.0.181-27.26.2.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-3639",
"url": "https://www.suse.com/security/cve/CVE-2018-3639"
},
{
"category": "external",
"summary": "SUSE Bug 1074701 for CVE-2018-3639",
"url": "https://bugzilla.suse.com/1074701"
},
{
"category": "external",
"summary": "SUSE Bug 1085235 for CVE-2018-3639",
"url": "https://bugzilla.suse.com/1085235"
},
{
"category": "external",
"summary": "SUSE Bug 1085308 for CVE-2018-3639",
"url": "https://bugzilla.suse.com/1085308"
},
{
"category": "external",
"summary": "SUSE Bug 1087078 for CVE-2018-3639",
"url": "https://bugzilla.suse.com/1087078"
},
{
"category": "external",
"summary": "SUSE Bug 1087082 for CVE-2018-3639",
"url": "https://bugzilla.suse.com/1087082"
},
{
"category": "external",
"summary": "SUSE Bug 1092631 for CVE-2018-3639",
"url": "https://bugzilla.suse.com/1092631"
},
{
"category": "external",
"summary": "SUSE Bug 1092885 for CVE-2018-3639",
"url": "https://bugzilla.suse.com/1092885"
},
{
"category": "external",
"summary": "SUSE Bug 1094912 for CVE-2018-3639",
"url": "https://bugzilla.suse.com/1094912"
},
{
"category": "external",
"summary": "SUSE Bug 1098813 for CVE-2018-3639",
"url": "https://bugzilla.suse.com/1098813"
},
{
"category": "external",
"summary": "SUSE Bug 1100394 for CVE-2018-3639",
"url": "https://bugzilla.suse.com/1100394"
},
{
"category": "external",
"summary": "SUSE Bug 1102640 for CVE-2018-3639",
"url": "https://bugzilla.suse.com/1102640"
},
{
"category": "external",
"summary": "SUSE Bug 1105412 for CVE-2018-3639",
"url": "https://bugzilla.suse.com/1105412"
},
{
"category": "external",
"summary": "SUSE Bug 1111963 for CVE-2018-3639",
"url": "https://bugzilla.suse.com/1111963"
},
{
"category": "external",
"summary": "SUSE Bug 1172781 for CVE-2018-3639",
"url": "https://bugzilla.suse.com/1172781"
},
{
"category": "external",
"summary": "SUSE Bug 1172782 for CVE-2018-3639",
"url": "https://bugzilla.suse.com/1172782"
},
{
"category": "external",
"summary": "SUSE Bug 1172783 for CVE-2018-3639",
"url": "https://bugzilla.suse.com/1172783"
},
{
"category": "external",
"summary": "SUSE Bug 1173489 for CVE-2018-3639",
"url": "https://bugzilla.suse.com/1173489"
},
{
"category": "external",
"summary": "SUSE Bug 1178658 for CVE-2018-3639",
"url": "https://bugzilla.suse.com/1178658"
},
{
"category": "external",
"summary": "SUSE Bug 1201877 for CVE-2018-3639",
"url": "https://bugzilla.suse.com/1201877"
},
{
"category": "external",
"summary": "SUSE Bug 1215674 for CVE-2018-3639",
"url": "https://bugzilla.suse.com/1215674"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Enterprise Storage 4:java-1_8_0-openjdk-1.8.0.181-27.26.2.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Desktop 12 SP3:java-1_8_0-openjdk-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Desktop 12 SP3:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-1.8.0.181-27.26.2.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-1.8.0.181-27.26.2.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-openjdk-1.8.0.181-27.26.2.aarch64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-openjdk-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-openjdk-1.8.0.181-27.26.2.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-openjdk-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.aarch64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.aarch64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.aarch64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-1.8.0.181-27.26.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-1.8.0.181-27.26.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-1.8.0.181-27.26.2.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-1.8.0.181-27.26.2.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"SUSE Enterprise Storage 4:java-1_8_0-openjdk-1.8.0.181-27.26.2.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Desktop 12 SP3:java-1_8_0-openjdk-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Desktop 12 SP3:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-1.8.0.181-27.26.2.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-1.8.0.181-27.26.2.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-openjdk-1.8.0.181-27.26.2.aarch64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-openjdk-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-openjdk-1.8.0.181-27.26.2.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-openjdk-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.aarch64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.aarch64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.aarch64",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-1.8.0.181-27.26.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-1.8.0.181-27.26.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-1.8.0.181-27.26.2.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-1.8.0.181-27.26.2.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-demo-1.8.0.181-27.26.2.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-devel-1.8.0.181-27.26.2.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-headless-1.8.0.181-27.26.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-10-08T05:42:59Z",
"details": "moderate"
}
],
"title": "CVE-2018-3639"
}
]
}
suse-su-2019:0049-1
Vulnerability from csaf_suse
Published
2019-01-09 16:26
Modified
2019-01-09 16:26
Summary
Security update for java-1_7_0-openjdk
Notes
Title of the patch
Security update for java-1_7_0-openjdk
Description of the patch
This update for java-1_7_0-openjdk to version 7u201 fixes the following issues:
Security issues fixed:
- CVE-2018-3136: Manifest better support (bsc#1112142)
- CVE-2018-3139: Better HTTP Redirection (bsc#1112143)
- CVE-2018-3149: Enhance JNDI lookups (bsc#1112144)
- CVE-2018-3169: Improve field accesses (bsc#1112146)
- CVE-2018-3180: Improve TLS connections stability (bsc#1112147)
- CVE-2018-3214: Better RIFF reading support (bsc#1112152)
- CVE-2018-13785: Upgrade JDK 8u to libpng 1.6.35 (bsc#1112153)
- CVE-2018-16435: heap-based buffer overflow in SetData function in cmsIT8LoadFromFile
- CVE-2018-2938: Support Derby connections (bsc#1101644)
- CVE-2018-2940: Better stack walking (bsc#1101645)
- CVE-2018-2952: Exception to Pattern Syntax (bsc#1101651)
- CVE-2018-2973: Improve LDAP support (bsc#1101656)
- CVE-2018-3639 cpu speculative store bypass mitigation
Patchnames
SUSE-2019-49,SUSE-OpenStack-Cloud-7-2019-49,SUSE-SLE-DESKTOP-12-SP3-2019-49,SUSE-SLE-DESKTOP-12-SP4-2019-49,SUSE-SLE-SAP-12-SP2-2019-49,SUSE-SLE-SERVER-12-2019-49,SUSE-SLE-SERVER-12-SP1-2019-49,SUSE-SLE-SERVER-12-SP2-2019-49,SUSE-SLE-SERVER-12-SP2-BCL-2019-49,SUSE-SLE-SERVER-12-SP3-2019-49,SUSE-SLE-SERVER-12-SP4-2019-49,SUSE-Storage-4-2019-49
Terms of use
CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for java-1_7_0-openjdk",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This update for java-1_7_0-openjdk to version 7u201 fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2018-3136: Manifest better support (bsc#1112142)\n- CVE-2018-3139: Better HTTP Redirection (bsc#1112143)\n- CVE-2018-3149: Enhance JNDI lookups (bsc#1112144)\n- CVE-2018-3169: Improve field accesses (bsc#1112146)\n- CVE-2018-3180: Improve TLS connections stability (bsc#1112147)\n- CVE-2018-3214: Better RIFF reading support (bsc#1112152)\n- CVE-2018-13785: Upgrade JDK 8u to libpng 1.6.35 (bsc#1112153)\n- CVE-2018-16435: heap-based buffer overflow in SetData function in cmsIT8LoadFromFile\n- CVE-2018-2938: Support Derby connections (bsc#1101644)\n- CVE-2018-2940: Better stack walking (bsc#1101645)\n- CVE-2018-2952: Exception to Pattern Syntax (bsc#1101651)\n- CVE-2018-2973: Improve LDAP support (bsc#1101656)\n- CVE-2018-3639 cpu speculative store bypass mitigation\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "SUSE-2019-49,SUSE-OpenStack-Cloud-7-2019-49,SUSE-SLE-DESKTOP-12-SP3-2019-49,SUSE-SLE-DESKTOP-12-SP4-2019-49,SUSE-SLE-SAP-12-SP2-2019-49,SUSE-SLE-SERVER-12-2019-49,SUSE-SLE-SERVER-12-SP1-2019-49,SUSE-SLE-SERVER-12-SP2-2019-49,SUSE-SLE-SERVER-12-SP2-BCL-2019-49,SUSE-SLE-SERVER-12-SP3-2019-49,SUSE-SLE-SERVER-12-SP4-2019-49,SUSE-Storage-4-2019-49",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2019_0049-1.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2019:0049-1",
"url": "https://www.suse.com/support/update/announcement/2019/suse-su-20190049-1/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2019:0049-1",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2019-January/005021.html"
},
{
"category": "self",
"summary": "SUSE Bug 1101644",
"url": "https://bugzilla.suse.com/1101644"
},
{
"category": "self",
"summary": "SUSE Bug 1101645",
"url": "https://bugzilla.suse.com/1101645"
},
{
"category": "self",
"summary": "SUSE Bug 1101651",
"url": "https://bugzilla.suse.com/1101651"
},
{
"category": "self",
"summary": "SUSE Bug 1101656",
"url": "https://bugzilla.suse.com/1101656"
},
{
"category": "self",
"summary": "SUSE Bug 1112142",
"url": "https://bugzilla.suse.com/1112142"
},
{
"category": "self",
"summary": "SUSE Bug 1112143",
"url": "https://bugzilla.suse.com/1112143"
},
{
"category": "self",
"summary": "SUSE Bug 1112144",
"url": "https://bugzilla.suse.com/1112144"
},
{
"category": "self",
"summary": "SUSE Bug 1112146",
"url": "https://bugzilla.suse.com/1112146"
},
{
"category": "self",
"summary": "SUSE Bug 1112147",
"url": "https://bugzilla.suse.com/1112147"
},
{
"category": "self",
"summary": "SUSE Bug 1112152",
"url": "https://bugzilla.suse.com/1112152"
},
{
"category": "self",
"summary": "SUSE Bug 1112153",
"url": "https://bugzilla.suse.com/1112153"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-13785 page",
"url": "https://www.suse.com/security/cve/CVE-2018-13785/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-16435 page",
"url": "https://www.suse.com/security/cve/CVE-2018-16435/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-2938 page",
"url": "https://www.suse.com/security/cve/CVE-2018-2938/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-2940 page",
"url": "https://www.suse.com/security/cve/CVE-2018-2940/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-2952 page",
"url": "https://www.suse.com/security/cve/CVE-2018-2952/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-2973 page",
"url": "https://www.suse.com/security/cve/CVE-2018-2973/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-3136 page",
"url": "https://www.suse.com/security/cve/CVE-2018-3136/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-3139 page",
"url": "https://www.suse.com/security/cve/CVE-2018-3139/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-3149 page",
"url": "https://www.suse.com/security/cve/CVE-2018-3149/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-3169 page",
"url": "https://www.suse.com/security/cve/CVE-2018-3169/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-3180 page",
"url": "https://www.suse.com/security/cve/CVE-2018-3180/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-3214 page",
"url": "https://www.suse.com/security/cve/CVE-2018-3214/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-3639 page",
"url": "https://www.suse.com/security/cve/CVE-2018-3639/"
}
],
"title": "Security update for java-1_7_0-openjdk",
"tracking": {
"current_release_date": "2019-01-09T16:26:14Z",
"generator": {
"date": "2019-01-09T16:26:14Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2019:0049-1",
"initial_release_date": "2019-01-09T16:26:14Z",
"revision_history": [
{
"date": "2019-01-09T16:26:14Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "java-1_7_0-openjdk-1.7.0.201-43.18.1.aarch64",
"product": {
"name": "java-1_7_0-openjdk-1.7.0.201-43.18.1.aarch64",
"product_id": "java-1_7_0-openjdk-1.7.0.201-43.18.1.aarch64"
}
},
{
"category": "product_version",
"name": "java-1_7_0-openjdk-accessibility-1.7.0.201-43.18.1.aarch64",
"product": {
"name": "java-1_7_0-openjdk-accessibility-1.7.0.201-43.18.1.aarch64",
"product_id": "java-1_7_0-openjdk-accessibility-1.7.0.201-43.18.1.aarch64"
}
},
{
"category": "product_version",
"name": "java-1_7_0-openjdk-bootstrap-1.7.0.201-43.18.1.aarch64",
"product": {
"name": "java-1_7_0-openjdk-bootstrap-1.7.0.201-43.18.1.aarch64",
"product_id": "java-1_7_0-openjdk-bootstrap-1.7.0.201-43.18.1.aarch64"
}
},
{
"category": "product_version",
"name": "java-1_7_0-openjdk-bootstrap-devel-1.7.0.201-43.18.1.aarch64",
"product": {
"name": "java-1_7_0-openjdk-bootstrap-devel-1.7.0.201-43.18.1.aarch64",
"product_id": "java-1_7_0-openjdk-bootstrap-devel-1.7.0.201-43.18.1.aarch64"
}
},
{
"category": "product_version",
"name": "java-1_7_0-openjdk-bootstrap-headless-1.7.0.201-43.18.1.aarch64",
"product": {
"name": "java-1_7_0-openjdk-bootstrap-headless-1.7.0.201-43.18.1.aarch64",
"product_id": "java-1_7_0-openjdk-bootstrap-headless-1.7.0.201-43.18.1.aarch64"
}
},
{
"category": "product_version",
"name": "java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.aarch64",
"product": {
"name": "java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.aarch64",
"product_id": "java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.aarch64"
}
},
{
"category": "product_version",
"name": "java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.aarch64",
"product": {
"name": "java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.aarch64",
"product_id": "java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.aarch64"
}
},
{
"category": "product_version",
"name": "java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.aarch64",
"product": {
"name": "java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.aarch64",
"product_id": "java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.aarch64"
}
},
{
"category": "product_version",
"name": "java-1_7_0-openjdk-src-1.7.0.201-43.18.1.aarch64",
"product": {
"name": "java-1_7_0-openjdk-src-1.7.0.201-43.18.1.aarch64",
"product_id": "java-1_7_0-openjdk-src-1.7.0.201-43.18.1.aarch64"
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "java-1_7_0-openjdk-1.7.0.201-43.18.1.i586",
"product": {
"name": "java-1_7_0-openjdk-1.7.0.201-43.18.1.i586",
"product_id": "java-1_7_0-openjdk-1.7.0.201-43.18.1.i586"
}
},
{
"category": "product_version",
"name": "java-1_7_0-openjdk-accessibility-1.7.0.201-43.18.1.i586",
"product": {
"name": "java-1_7_0-openjdk-accessibility-1.7.0.201-43.18.1.i586",
"product_id": "java-1_7_0-openjdk-accessibility-1.7.0.201-43.18.1.i586"
}
},
{
"category": "product_version",
"name": "java-1_7_0-openjdk-bootstrap-1.7.0.201-43.18.1.i586",
"product": {
"name": "java-1_7_0-openjdk-bootstrap-1.7.0.201-43.18.1.i586",
"product_id": "java-1_7_0-openjdk-bootstrap-1.7.0.201-43.18.1.i586"
}
},
{
"category": "product_version",
"name": "java-1_7_0-openjdk-bootstrap-devel-1.7.0.201-43.18.1.i586",
"product": {
"name": "java-1_7_0-openjdk-bootstrap-devel-1.7.0.201-43.18.1.i586",
"product_id": "java-1_7_0-openjdk-bootstrap-devel-1.7.0.201-43.18.1.i586"
}
},
{
"category": "product_version",
"name": "java-1_7_0-openjdk-bootstrap-headless-1.7.0.201-43.18.1.i586",
"product": {
"name": "java-1_7_0-openjdk-bootstrap-headless-1.7.0.201-43.18.1.i586",
"product_id": "java-1_7_0-openjdk-bootstrap-headless-1.7.0.201-43.18.1.i586"
}
},
{
"category": "product_version",
"name": "java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.i586",
"product": {
"name": "java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.i586",
"product_id": "java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.i586"
}
},
{
"category": "product_version",
"name": "java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.i586",
"product": {
"name": "java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.i586",
"product_id": "java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.i586"
}
},
{
"category": "product_version",
"name": "java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.i586",
"product": {
"name": "java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.i586",
"product_id": "java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.i586"
}
},
{
"category": "product_version",
"name": "java-1_7_0-openjdk-src-1.7.0.201-43.18.1.i586",
"product": {
"name": "java-1_7_0-openjdk-src-1.7.0.201-43.18.1.i586",
"product_id": "java-1_7_0-openjdk-src-1.7.0.201-43.18.1.i586"
}
}
],
"category": "architecture",
"name": "i586"
},
{
"branches": [
{
"category": "product_version",
"name": "java-1_7_0-openjdk-javadoc-1.7.0.201-43.18.1.noarch",
"product": {
"name": "java-1_7_0-openjdk-javadoc-1.7.0.201-43.18.1.noarch",
"product_id": "java-1_7_0-openjdk-javadoc-1.7.0.201-43.18.1.noarch"
}
}
],
"category": "architecture",
"name": "noarch"
},
{
"branches": [
{
"category": "product_version",
"name": "java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"product": {
"name": "java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"product_id": "java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le"
}
},
{
"category": "product_version",
"name": "java-1_7_0-openjdk-accessibility-1.7.0.201-43.18.1.ppc64le",
"product": {
"name": "java-1_7_0-openjdk-accessibility-1.7.0.201-43.18.1.ppc64le",
"product_id": "java-1_7_0-openjdk-accessibility-1.7.0.201-43.18.1.ppc64le"
}
},
{
"category": "product_version",
"name": "java-1_7_0-openjdk-bootstrap-1.7.0.201-43.18.1.ppc64le",
"product": {
"name": "java-1_7_0-openjdk-bootstrap-1.7.0.201-43.18.1.ppc64le",
"product_id": "java-1_7_0-openjdk-bootstrap-1.7.0.201-43.18.1.ppc64le"
}
},
{
"category": "product_version",
"name": "java-1_7_0-openjdk-bootstrap-devel-1.7.0.201-43.18.1.ppc64le",
"product": {
"name": "java-1_7_0-openjdk-bootstrap-devel-1.7.0.201-43.18.1.ppc64le",
"product_id": "java-1_7_0-openjdk-bootstrap-devel-1.7.0.201-43.18.1.ppc64le"
}
},
{
"category": "product_version",
"name": "java-1_7_0-openjdk-bootstrap-headless-1.7.0.201-43.18.1.ppc64le",
"product": {
"name": "java-1_7_0-openjdk-bootstrap-headless-1.7.0.201-43.18.1.ppc64le",
"product_id": "java-1_7_0-openjdk-bootstrap-headless-1.7.0.201-43.18.1.ppc64le"
}
},
{
"category": "product_version",
"name": "java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"product": {
"name": "java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"product_id": "java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le"
}
},
{
"category": "product_version",
"name": "java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"product": {
"name": "java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"product_id": "java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le"
}
},
{
"category": "product_version",
"name": "java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"product": {
"name": "java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"product_id": "java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le"
}
},
{
"category": "product_version",
"name": "java-1_7_0-openjdk-src-1.7.0.201-43.18.1.ppc64le",
"product": {
"name": "java-1_7_0-openjdk-src-1.7.0.201-43.18.1.ppc64le",
"product_id": "java-1_7_0-openjdk-src-1.7.0.201-43.18.1.ppc64le"
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "java-1_7_0-openjdk-1.7.0.201-43.18.1.s390",
"product": {
"name": "java-1_7_0-openjdk-1.7.0.201-43.18.1.s390",
"product_id": "java-1_7_0-openjdk-1.7.0.201-43.18.1.s390"
}
},
{
"category": "product_version",
"name": "java-1_7_0-openjdk-accessibility-1.7.0.201-43.18.1.s390",
"product": {
"name": "java-1_7_0-openjdk-accessibility-1.7.0.201-43.18.1.s390",
"product_id": "java-1_7_0-openjdk-accessibility-1.7.0.201-43.18.1.s390"
}
},
{
"category": "product_version",
"name": "java-1_7_0-openjdk-bootstrap-1.7.0.201-43.18.1.s390",
"product": {
"name": "java-1_7_0-openjdk-bootstrap-1.7.0.201-43.18.1.s390",
"product_id": "java-1_7_0-openjdk-bootstrap-1.7.0.201-43.18.1.s390"
}
},
{
"category": "product_version",
"name": "java-1_7_0-openjdk-bootstrap-devel-1.7.0.201-43.18.1.s390",
"product": {
"name": "java-1_7_0-openjdk-bootstrap-devel-1.7.0.201-43.18.1.s390",
"product_id": "java-1_7_0-openjdk-bootstrap-devel-1.7.0.201-43.18.1.s390"
}
},
{
"category": "product_version",
"name": "java-1_7_0-openjdk-bootstrap-headless-1.7.0.201-43.18.1.s390",
"product": {
"name": "java-1_7_0-openjdk-bootstrap-headless-1.7.0.201-43.18.1.s390",
"product_id": "java-1_7_0-openjdk-bootstrap-headless-1.7.0.201-43.18.1.s390"
}
},
{
"category": "product_version",
"name": "java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390",
"product": {
"name": "java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390",
"product_id": "java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390"
}
},
{
"category": "product_version",
"name": "java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390",
"product": {
"name": "java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390",
"product_id": "java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390"
}
},
{
"category": "product_version",
"name": "java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390",
"product": {
"name": "java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390",
"product_id": "java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390"
}
},
{
"category": "product_version",
"name": "java-1_7_0-openjdk-src-1.7.0.201-43.18.1.s390",
"product": {
"name": "java-1_7_0-openjdk-src-1.7.0.201-43.18.1.s390",
"product_id": "java-1_7_0-openjdk-src-1.7.0.201-43.18.1.s390"
}
}
],
"category": "architecture",
"name": "s390"
},
{
"branches": [
{
"category": "product_version",
"name": "java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"product": {
"name": "java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"product_id": "java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x"
}
},
{
"category": "product_version",
"name": "java-1_7_0-openjdk-accessibility-1.7.0.201-43.18.1.s390x",
"product": {
"name": "java-1_7_0-openjdk-accessibility-1.7.0.201-43.18.1.s390x",
"product_id": "java-1_7_0-openjdk-accessibility-1.7.0.201-43.18.1.s390x"
}
},
{
"category": "product_version",
"name": "java-1_7_0-openjdk-bootstrap-1.7.0.201-43.18.1.s390x",
"product": {
"name": "java-1_7_0-openjdk-bootstrap-1.7.0.201-43.18.1.s390x",
"product_id": "java-1_7_0-openjdk-bootstrap-1.7.0.201-43.18.1.s390x"
}
},
{
"category": "product_version",
"name": "java-1_7_0-openjdk-bootstrap-devel-1.7.0.201-43.18.1.s390x",
"product": {
"name": "java-1_7_0-openjdk-bootstrap-devel-1.7.0.201-43.18.1.s390x",
"product_id": "java-1_7_0-openjdk-bootstrap-devel-1.7.0.201-43.18.1.s390x"
}
},
{
"category": "product_version",
"name": "java-1_7_0-openjdk-bootstrap-headless-1.7.0.201-43.18.1.s390x",
"product": {
"name": "java-1_7_0-openjdk-bootstrap-headless-1.7.0.201-43.18.1.s390x",
"product_id": "java-1_7_0-openjdk-bootstrap-headless-1.7.0.201-43.18.1.s390x"
}
},
{
"category": "product_version",
"name": "java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"product": {
"name": "java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"product_id": "java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x"
}
},
{
"category": "product_version",
"name": "java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"product": {
"name": "java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"product_id": "java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x"
}
},
{
"category": "product_version",
"name": "java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"product": {
"name": "java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"product_id": "java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x"
}
},
{
"category": "product_version",
"name": "java-1_7_0-openjdk-src-1.7.0.201-43.18.1.s390x",
"product": {
"name": "java-1_7_0-openjdk-src-1.7.0.201-43.18.1.s390x",
"product_id": "java-1_7_0-openjdk-src-1.7.0.201-43.18.1.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"product": {
"name": "java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"product_id": "java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64"
}
},
{
"category": "product_version",
"name": "java-1_7_0-openjdk-accessibility-1.7.0.201-43.18.1.x86_64",
"product": {
"name": "java-1_7_0-openjdk-accessibility-1.7.0.201-43.18.1.x86_64",
"product_id": "java-1_7_0-openjdk-accessibility-1.7.0.201-43.18.1.x86_64"
}
},
{
"category": "product_version",
"name": "java-1_7_0-openjdk-bootstrap-1.7.0.201-43.18.1.x86_64",
"product": {
"name": "java-1_7_0-openjdk-bootstrap-1.7.0.201-43.18.1.x86_64",
"product_id": "java-1_7_0-openjdk-bootstrap-1.7.0.201-43.18.1.x86_64"
}
},
{
"category": "product_version",
"name": "java-1_7_0-openjdk-bootstrap-devel-1.7.0.201-43.18.1.x86_64",
"product": {
"name": "java-1_7_0-openjdk-bootstrap-devel-1.7.0.201-43.18.1.x86_64",
"product_id": "java-1_7_0-openjdk-bootstrap-devel-1.7.0.201-43.18.1.x86_64"
}
},
{
"category": "product_version",
"name": "java-1_7_0-openjdk-bootstrap-headless-1.7.0.201-43.18.1.x86_64",
"product": {
"name": "java-1_7_0-openjdk-bootstrap-headless-1.7.0.201-43.18.1.x86_64",
"product_id": "java-1_7_0-openjdk-bootstrap-headless-1.7.0.201-43.18.1.x86_64"
}
},
{
"category": "product_version",
"name": "java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"product": {
"name": "java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"product_id": "java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64"
}
},
{
"category": "product_version",
"name": "java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"product": {
"name": "java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"product_id": "java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64"
}
},
{
"category": "product_version",
"name": "java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"product": {
"name": "java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"product_id": "java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64"
}
},
{
"category": "product_version",
"name": "java-1_7_0-openjdk-src-1.7.0.201-43.18.1.x86_64",
"product": {
"name": "java-1_7_0-openjdk-src-1.7.0.201-43.18.1.x86_64",
"product_id": "java-1_7_0-openjdk-src-1.7.0.201-43.18.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE OpenStack Cloud 7",
"product": {
"name": "SUSE OpenStack Cloud 7",
"product_id": "SUSE OpenStack Cloud 7",
"product_identification_helper": {
"cpe": "cpe:/o:suse:suse-openstack-cloud:7"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Desktop 12 SP3",
"product": {
"name": "SUSE Linux Enterprise Desktop 12 SP3",
"product_id": "SUSE Linux Enterprise Desktop 12 SP3",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sled:12:sp3"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Desktop 12 SP4",
"product": {
"name": "SUSE Linux Enterprise Desktop 12 SP4",
"product_id": "SUSE Linux Enterprise Desktop 12 SP4",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sled:12:sp4"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server for SAP Applications 12 SP2",
"product": {
"name": "SUSE Linux Enterprise Server for SAP Applications 12 SP2",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP2",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles_sap:12:sp2"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 12-LTSS",
"product": {
"name": "SUSE Linux Enterprise Server 12-LTSS",
"product_id": "SUSE Linux Enterprise Server 12-LTSS",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles-ltss:12"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 12 SP1-LTSS",
"product": {
"name": "SUSE Linux Enterprise Server 12 SP1-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP1-LTSS",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles-ltss:12:sp1"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 12 SP2-LTSS",
"product": {
"name": "SUSE Linux Enterprise Server 12 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP2-LTSS",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles-ltss:12:sp2"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 12 SP2-BCL",
"product": {
"name": "SUSE Linux Enterprise Server 12 SP2-BCL",
"product_id": "SUSE Linux Enterprise Server 12 SP2-BCL",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles-bcl:12:sp2"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 12 SP3",
"product": {
"name": "SUSE Linux Enterprise Server 12 SP3",
"product_id": "SUSE Linux Enterprise Server 12 SP3",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles:12:sp3"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server for SAP Applications 12 SP3",
"product": {
"name": "SUSE Linux Enterprise Server for SAP Applications 12 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP3",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles_sap:12:sp3"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 12 SP4",
"product": {
"name": "SUSE Linux Enterprise Server 12 SP4",
"product_id": "SUSE Linux Enterprise Server 12 SP4",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles:12:sp4"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server for SAP Applications 12 SP4",
"product": {
"name": "SUSE Linux Enterprise Server for SAP Applications 12 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP4",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles_sap:12:sp4"
}
}
},
{
"category": "product_name",
"name": "SUSE Enterprise Storage 4",
"product": {
"name": "SUSE Enterprise Storage 4",
"product_id": "SUSE Enterprise Storage 4",
"product_identification_helper": {
"cpe": "cpe:/o:suse:ses:4"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x as component of SUSE OpenStack Cloud 7",
"product_id": "SUSE OpenStack Cloud 7:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x"
},
"product_reference": "java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"relates_to_product_reference": "SUSE OpenStack Cloud 7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64 as component of SUSE OpenStack Cloud 7",
"product_id": "SUSE OpenStack Cloud 7:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64"
},
"product_reference": "java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"relates_to_product_reference": "SUSE OpenStack Cloud 7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x as component of SUSE OpenStack Cloud 7",
"product_id": "SUSE OpenStack Cloud 7:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x"
},
"product_reference": "java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"relates_to_product_reference": "SUSE OpenStack Cloud 7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64 as component of SUSE OpenStack Cloud 7",
"product_id": "SUSE OpenStack Cloud 7:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64"
},
"product_reference": "java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"relates_to_product_reference": "SUSE OpenStack Cloud 7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x as component of SUSE OpenStack Cloud 7",
"product_id": "SUSE OpenStack Cloud 7:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x"
},
"product_reference": "java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"relates_to_product_reference": "SUSE OpenStack Cloud 7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64 as component of SUSE OpenStack Cloud 7",
"product_id": "SUSE OpenStack Cloud 7:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64"
},
"product_reference": "java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"relates_to_product_reference": "SUSE OpenStack Cloud 7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x as component of SUSE OpenStack Cloud 7",
"product_id": "SUSE OpenStack Cloud 7:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x"
},
"product_reference": "java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"relates_to_product_reference": "SUSE OpenStack Cloud 7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64 as component of SUSE OpenStack Cloud 7",
"product_id": "SUSE OpenStack Cloud 7:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64"
},
"product_reference": "java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"relates_to_product_reference": "SUSE OpenStack Cloud 7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64 as component of SUSE Linux Enterprise Desktop 12 SP3",
"product_id": "SUSE Linux Enterprise Desktop 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64"
},
"product_reference": "java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Desktop 12 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64 as component of SUSE Linux Enterprise Desktop 12 SP3",
"product_id": "SUSE Linux Enterprise Desktop 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64"
},
"product_reference": "java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Desktop 12 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64 as component of SUSE Linux Enterprise Desktop 12 SP4",
"product_id": "SUSE Linux Enterprise Desktop 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64"
},
"product_reference": "java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Desktop 12 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64 as component of SUSE Linux Enterprise Desktop 12 SP4",
"product_id": "SUSE Linux Enterprise Desktop 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64"
},
"product_reference": "java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Desktop 12 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le"
},
"product_reference": "java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64"
},
"product_reference": "java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le"
},
"product_reference": "java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64"
},
"product_reference": "java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le"
},
"product_reference": "java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64"
},
"product_reference": "java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le"
},
"product_reference": "java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64"
},
"product_reference": "java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le as component of SUSE Linux Enterprise Server 12-LTSS",
"product_id": "SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le"
},
"product_reference": "java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x as component of SUSE Linux Enterprise Server 12-LTSS",
"product_id": "SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x"
},
"product_reference": "java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64 as component of SUSE Linux Enterprise Server 12-LTSS",
"product_id": "SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64"
},
"product_reference": "java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le as component of SUSE Linux Enterprise Server 12-LTSS",
"product_id": "SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le"
},
"product_reference": "java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x as component of SUSE Linux Enterprise Server 12-LTSS",
"product_id": "SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x"
},
"product_reference": "java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64 as component of SUSE Linux Enterprise Server 12-LTSS",
"product_id": "SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64"
},
"product_reference": "java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le as component of SUSE Linux Enterprise Server 12-LTSS",
"product_id": "SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le"
},
"product_reference": "java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x as component of SUSE Linux Enterprise Server 12-LTSS",
"product_id": "SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x"
},
"product_reference": "java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64 as component of SUSE Linux Enterprise Server 12-LTSS",
"product_id": "SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64"
},
"product_reference": "java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le as component of SUSE Linux Enterprise Server 12-LTSS",
"product_id": "SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le"
},
"product_reference": "java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x as component of SUSE Linux Enterprise Server 12-LTSS",
"product_id": "SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x"
},
"product_reference": "java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64 as component of SUSE Linux Enterprise Server 12-LTSS",
"product_id": "SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64"
},
"product_reference": "java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP1-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le"
},
"product_reference": "java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x as component of SUSE Linux Enterprise Server 12 SP1-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x"
},
"product_reference": "java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP1-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64"
},
"product_reference": "java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP1-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le"
},
"product_reference": "java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x as component of SUSE Linux Enterprise Server 12 SP1-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x"
},
"product_reference": "java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP1-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64"
},
"product_reference": "java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP1-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le"
},
"product_reference": "java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x as component of SUSE Linux Enterprise Server 12 SP1-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x"
},
"product_reference": "java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP1-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64"
},
"product_reference": "java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP1-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le"
},
"product_reference": "java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x as component of SUSE Linux Enterprise Server 12 SP1-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x"
},
"product_reference": "java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP1-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64"
},
"product_reference": "java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le"
},
"product_reference": "java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x as component of SUSE Linux Enterprise Server 12 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x"
},
"product_reference": "java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64"
},
"product_reference": "java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le"
},
"product_reference": "java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x as component of SUSE Linux Enterprise Server 12 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x"
},
"product_reference": "java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64"
},
"product_reference": "java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le"
},
"product_reference": "java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x as component of SUSE Linux Enterprise Server 12 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x"
},
"product_reference": "java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64"
},
"product_reference": "java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le"
},
"product_reference": "java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x as component of SUSE Linux Enterprise Server 12 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x"
},
"product_reference": "java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64"
},
"product_reference": "java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP2-BCL",
"product_id": "SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64"
},
"product_reference": "java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2-BCL"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP2-BCL",
"product_id": "SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64"
},
"product_reference": "java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2-BCL"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP2-BCL",
"product_id": "SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64"
},
"product_reference": "java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2-BCL"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP2-BCL",
"product_id": "SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64"
},
"product_reference": "java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2-BCL"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-openjdk-1.7.0.201-43.18.1.aarch64 as component of SUSE Linux Enterprise Server 12 SP3",
"product_id": "SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.aarch64"
},
"product_reference": "java-1_7_0-openjdk-1.7.0.201-43.18.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP3",
"product_id": "SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le"
},
"product_reference": "java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x as component of SUSE Linux Enterprise Server 12 SP3",
"product_id": "SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x"
},
"product_reference": "java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP3",
"product_id": "SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64"
},
"product_reference": "java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.aarch64 as component of SUSE Linux Enterprise Server 12 SP3",
"product_id": "SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.aarch64"
},
"product_reference": "java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP3",
"product_id": "SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le"
},
"product_reference": "java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x as component of SUSE Linux Enterprise Server 12 SP3",
"product_id": "SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x"
},
"product_reference": "java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP3",
"product_id": "SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64"
},
"product_reference": "java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.aarch64 as component of SUSE Linux Enterprise Server 12 SP3",
"product_id": "SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.aarch64"
},
"product_reference": "java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP3",
"product_id": "SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le"
},
"product_reference": "java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x as component of SUSE Linux Enterprise Server 12 SP3",
"product_id": "SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x"
},
"product_reference": "java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP3",
"product_id": "SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64"
},
"product_reference": "java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.aarch64 as component of SUSE Linux Enterprise Server 12 SP3",
"product_id": "SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.aarch64"
},
"product_reference": "java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP3",
"product_id": "SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le"
},
"product_reference": "java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x as component of SUSE Linux Enterprise Server 12 SP3",
"product_id": "SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x"
},
"product_reference": "java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP3",
"product_id": "SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64"
},
"product_reference": "java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-openjdk-1.7.0.201-43.18.1.aarch64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.aarch64"
},
"product_reference": "java-1_7_0-openjdk-1.7.0.201-43.18.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le"
},
"product_reference": "java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x"
},
"product_reference": "java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64"
},
"product_reference": "java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.aarch64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.aarch64"
},
"product_reference": "java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le"
},
"product_reference": "java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x"
},
"product_reference": "java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64"
},
"product_reference": "java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.aarch64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.aarch64"
},
"product_reference": "java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le"
},
"product_reference": "java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x"
},
"product_reference": "java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64"
},
"product_reference": "java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.aarch64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.aarch64"
},
"product_reference": "java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le"
},
"product_reference": "java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x"
},
"product_reference": "java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64"
},
"product_reference": "java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-openjdk-1.7.0.201-43.18.1.aarch64 as component of SUSE Linux Enterprise Server 12 SP4",
"product_id": "SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.aarch64"
},
"product_reference": "java-1_7_0-openjdk-1.7.0.201-43.18.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP4",
"product_id": "SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le"
},
"product_reference": "java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x as component of SUSE Linux Enterprise Server 12 SP4",
"product_id": "SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x"
},
"product_reference": "java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP4",
"product_id": "SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64"
},
"product_reference": "java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.aarch64 as component of SUSE Linux Enterprise Server 12 SP4",
"product_id": "SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.aarch64"
},
"product_reference": "java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP4",
"product_id": "SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le"
},
"product_reference": "java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x as component of SUSE Linux Enterprise Server 12 SP4",
"product_id": "SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x"
},
"product_reference": "java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP4",
"product_id": "SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64"
},
"product_reference": "java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.aarch64 as component of SUSE Linux Enterprise Server 12 SP4",
"product_id": "SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.aarch64"
},
"product_reference": "java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP4",
"product_id": "SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le"
},
"product_reference": "java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x as component of SUSE Linux Enterprise Server 12 SP4",
"product_id": "SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x"
},
"product_reference": "java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP4",
"product_id": "SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64"
},
"product_reference": "java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.aarch64 as component of SUSE Linux Enterprise Server 12 SP4",
"product_id": "SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.aarch64"
},
"product_reference": "java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP4",
"product_id": "SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le"
},
"product_reference": "java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x as component of SUSE Linux Enterprise Server 12 SP4",
"product_id": "SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x"
},
"product_reference": "java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP4",
"product_id": "SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64"
},
"product_reference": "java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-openjdk-1.7.0.201-43.18.1.aarch64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.aarch64"
},
"product_reference": "java-1_7_0-openjdk-1.7.0.201-43.18.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le"
},
"product_reference": "java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x"
},
"product_reference": "java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64"
},
"product_reference": "java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.aarch64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.aarch64"
},
"product_reference": "java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le"
},
"product_reference": "java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x"
},
"product_reference": "java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64"
},
"product_reference": "java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.aarch64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.aarch64"
},
"product_reference": "java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le"
},
"product_reference": "java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x"
},
"product_reference": "java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64"
},
"product_reference": "java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.aarch64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.aarch64"
},
"product_reference": "java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le"
},
"product_reference": "java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x"
},
"product_reference": "java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64"
},
"product_reference": "java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64 as component of SUSE Enterprise Storage 4",
"product_id": "SUSE Enterprise Storage 4:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64"
},
"product_reference": "java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"relates_to_product_reference": "SUSE Enterprise Storage 4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64 as component of SUSE Enterprise Storage 4",
"product_id": "SUSE Enterprise Storage 4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64"
},
"product_reference": "java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"relates_to_product_reference": "SUSE Enterprise Storage 4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64 as component of SUSE Enterprise Storage 4",
"product_id": "SUSE Enterprise Storage 4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64"
},
"product_reference": "java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"relates_to_product_reference": "SUSE Enterprise Storage 4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64 as component of SUSE Enterprise Storage 4",
"product_id": "SUSE Enterprise Storage 4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64"
},
"product_reference": "java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"relates_to_product_reference": "SUSE Enterprise Storage 4"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2018-13785",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-13785"
}
],
"notes": [
{
"category": "general",
"text": "In libpng 1.6.34, a wrong calculation of row_factor in the png_check_chunk_length function (pngrutil.c) may trigger an integer overflow and resultant divide-by-zero while processing a crafted PNG file, leading to a denial of service.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Enterprise Storage 4:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-13785",
"url": "https://www.suse.com/security/cve/CVE-2018-13785"
},
{
"category": "external",
"summary": "SUSE Bug 1100687 for CVE-2018-13785",
"url": "https://bugzilla.suse.com/1100687"
},
{
"category": "external",
"summary": "SUSE Bug 1112153 for CVE-2018-13785",
"url": "https://bugzilla.suse.com/1112153"
},
{
"category": "external",
"summary": "SUSE Bug 1116574 for CVE-2018-13785",
"url": "https://bugzilla.suse.com/1116574"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Enterprise Storage 4:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"SUSE Enterprise Storage 4:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-01-09T16:26:14Z",
"details": "low"
}
],
"title": "CVE-2018-13785"
},
{
"cve": "CVE-2018-16435",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-16435"
}
],
"notes": [
{
"category": "general",
"text": "Little CMS (aka Little Color Management System) 2.9 has an integer overflow in the AllocateDataSet function in cmscgats.c, leading to a heap-based buffer overflow in the SetData function via a crafted file in the second argument to cmsIT8LoadFromFile.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Enterprise Storage 4:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-16435",
"url": "https://www.suse.com/security/cve/CVE-2018-16435"
},
{
"category": "external",
"summary": "SUSE Bug 1108813 for CVE-2018-16435",
"url": "https://bugzilla.suse.com/1108813"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Enterprise Storage 4:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"SUSE Enterprise Storage 4:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-01-09T16:26:14Z",
"details": "moderate"
}
],
"title": "CVE-2018-16435"
},
{
"cve": "CVE-2018-2938",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-2938"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Java DB). Supported versions that are affected are Java SE: 6u191, 7u181 and 8u172. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. While the vulnerability is in Java SE, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVE-2018-2938 addresses CVE-2018-1313. CVSS 3.0 Base Score 9.0 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Enterprise Storage 4:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-2938",
"url": "https://www.suse.com/security/cve/CVE-2018-2938"
},
{
"category": "external",
"summary": "SUSE Bug 1101644 for CVE-2018-2938",
"url": "https://bugzilla.suse.com/1101644"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Enterprise Storage 4:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"SUSE Enterprise Storage 4:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-01-09T16:26:14Z",
"details": "important"
}
],
"title": "CVE-2018-2938"
},
{
"cve": "CVE-2018-2940",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-2940"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries). Supported versions that are affected are Java SE: 6u191, 7u181, 8u172 and 10.0.1; Java SE Embedded: 8u171. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 4.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Enterprise Storage 4:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-2940",
"url": "https://www.suse.com/security/cve/CVE-2018-2940"
},
{
"category": "external",
"summary": "SUSE Bug 1101645 for CVE-2018-2940",
"url": "https://bugzilla.suse.com/1101645"
},
{
"category": "external",
"summary": "SUSE Bug 1101656 for CVE-2018-2940",
"url": "https://bugzilla.suse.com/1101656"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Enterprise Storage 4:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"SUSE Enterprise Storage 4:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-01-09T16:26:14Z",
"details": "moderate"
}
],
"title": "CVE-2018-2940"
},
{
"cve": "CVE-2018-2952",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-2952"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Concurrency). Supported versions that are affected are Java SE: 6u191, 7u181, 8u172 and 10.0.1; Java SE Embedded: 8u171; JRockit: R28.3.18. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 3.7 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Enterprise Storage 4:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-2952",
"url": "https://www.suse.com/security/cve/CVE-2018-2952"
},
{
"category": "external",
"summary": "SUSE Bug 1101645 for CVE-2018-2952",
"url": "https://bugzilla.suse.com/1101645"
},
{
"category": "external",
"summary": "SUSE Bug 1101651 for CVE-2018-2952",
"url": "https://bugzilla.suse.com/1101651"
},
{
"category": "external",
"summary": "SUSE Bug 1101656 for CVE-2018-2952",
"url": "https://bugzilla.suse.com/1101656"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Enterprise Storage 4:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"SUSE Enterprise Storage 4:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-01-09T16:26:14Z",
"details": "important"
}
],
"title": "CVE-2018-2952"
},
{
"cve": "CVE-2018-2973",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-2973"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: JSSE). Supported versions that are affected are Java SE: 6u191, 7u181, 8u172 and 10.0.1; Java SE Embedded: 8u171. Difficult to exploit vulnerability allows unauthenticated attacker with network access via SSL/TLS to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 5.9 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Enterprise Storage 4:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-2973",
"url": "https://www.suse.com/security/cve/CVE-2018-2973"
},
{
"category": "external",
"summary": "SUSE Bug 1101645 for CVE-2018-2973",
"url": "https://bugzilla.suse.com/1101645"
},
{
"category": "external",
"summary": "SUSE Bug 1101656 for CVE-2018-2973",
"url": "https://bugzilla.suse.com/1101656"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Enterprise Storage 4:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.0"
},
"products": [
"SUSE Enterprise Storage 4:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-01-09T16:26:14Z",
"details": "moderate"
}
],
"title": "CVE-2018-2973"
},
{
"cve": "CVE-2018-3136",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-3136"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u201, 7u191, 8u182 and 11; Java SE Embedded: 8u181. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, Java SE Embedded, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g. code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g. code installed by an administrator). CVSS 3.0 Base Score 3.4 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:L/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Enterprise Storage 4:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-3136",
"url": "https://www.suse.com/security/cve/CVE-2018-3136"
},
{
"category": "external",
"summary": "SUSE Bug 1112142 for CVE-2018-3136",
"url": "https://bugzilla.suse.com/1112142"
},
{
"category": "external",
"summary": "SUSE Bug 1112143 for CVE-2018-3136",
"url": "https://bugzilla.suse.com/1112143"
},
{
"category": "external",
"summary": "SUSE Bug 1112144 for CVE-2018-3136",
"url": "https://bugzilla.suse.com/1112144"
},
{
"category": "external",
"summary": "SUSE Bug 1112146 for CVE-2018-3136",
"url": "https://bugzilla.suse.com/1112146"
},
{
"category": "external",
"summary": "SUSE Bug 1112148 for CVE-2018-3136",
"url": "https://bugzilla.suse.com/1112148"
},
{
"category": "external",
"summary": "SUSE Bug 1112152 for CVE-2018-3136",
"url": "https://bugzilla.suse.com/1112152"
},
{
"category": "external",
"summary": "SUSE Bug 1116574 for CVE-2018-3136",
"url": "https://bugzilla.suse.com/1116574"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Enterprise Storage 4:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.1,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.0"
},
"products": [
"SUSE Enterprise Storage 4:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-01-09T16:26:14Z",
"details": "moderate"
}
],
"title": "CVE-2018-3136"
},
{
"cve": "CVE-2018-3139",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-3139"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Networking). Supported versions that are affected are Java SE: 6u201, 7u191, 8u182 and 11; Java SE Embedded: 8u181. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g. code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g. code installed by an administrator). CVSS 3.0 Base Score 3.1 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Enterprise Storage 4:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-3139",
"url": "https://www.suse.com/security/cve/CVE-2018-3139"
},
{
"category": "external",
"summary": "SUSE Bug 1112142 for CVE-2018-3139",
"url": "https://bugzilla.suse.com/1112142"
},
{
"category": "external",
"summary": "SUSE Bug 1112143 for CVE-2018-3139",
"url": "https://bugzilla.suse.com/1112143"
},
{
"category": "external",
"summary": "SUSE Bug 1112144 for CVE-2018-3139",
"url": "https://bugzilla.suse.com/1112144"
},
{
"category": "external",
"summary": "SUSE Bug 1112146 for CVE-2018-3139",
"url": "https://bugzilla.suse.com/1112146"
},
{
"category": "external",
"summary": "SUSE Bug 1112148 for CVE-2018-3139",
"url": "https://bugzilla.suse.com/1112148"
},
{
"category": "external",
"summary": "SUSE Bug 1112152 for CVE-2018-3139",
"url": "https://bugzilla.suse.com/1112152"
},
{
"category": "external",
"summary": "SUSE Bug 1116574 for CVE-2018-3139",
"url": "https://bugzilla.suse.com/1116574"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Enterprise Storage 4:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.1,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Enterprise Storage 4:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-01-09T16:26:14Z",
"details": "moderate"
}
],
"title": "CVE-2018-3139"
},
{
"cve": "CVE-2018-3149",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-3149"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JNDI). Supported versions that are affected are Java SE: 6u201, 7u191, 8u182 and 11; Java SE Embedded: 8u181; JRockit: R28.3.19. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, Java SE Embedded, JRockit, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE, Java SE Embedded, JRockit. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g. code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g. through a web service which supplies data to the APIs. CVSS 3.0 Base Score 8.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Enterprise Storage 4:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-3149",
"url": "https://www.suse.com/security/cve/CVE-2018-3149"
},
{
"category": "external",
"summary": "SUSE Bug 1112142 for CVE-2018-3149",
"url": "https://bugzilla.suse.com/1112142"
},
{
"category": "external",
"summary": "SUSE Bug 1112143 for CVE-2018-3149",
"url": "https://bugzilla.suse.com/1112143"
},
{
"category": "external",
"summary": "SUSE Bug 1112144 for CVE-2018-3149",
"url": "https://bugzilla.suse.com/1112144"
},
{
"category": "external",
"summary": "SUSE Bug 1112146 for CVE-2018-3149",
"url": "https://bugzilla.suse.com/1112146"
},
{
"category": "external",
"summary": "SUSE Bug 1112148 for CVE-2018-3149",
"url": "https://bugzilla.suse.com/1112148"
},
{
"category": "external",
"summary": "SUSE Bug 1112152 for CVE-2018-3149",
"url": "https://bugzilla.suse.com/1112152"
},
{
"category": "external",
"summary": "SUSE Bug 1116574 for CVE-2018-3149",
"url": "https://bugzilla.suse.com/1116574"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Enterprise Storage 4:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.3,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"SUSE Enterprise Storage 4:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-01-09T16:26:14Z",
"details": "moderate"
}
],
"title": "CVE-2018-3149"
},
{
"cve": "CVE-2018-3169",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-3169"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Hotspot). Supported versions that are affected are Java SE: 7u191, 8u182 and 11; Java SE Embedded: 8u181. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, Java SE Embedded, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g. code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g. code installed by an administrator). CVSS 3.0 Base Score 8.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Enterprise Storage 4:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-3169",
"url": "https://www.suse.com/security/cve/CVE-2018-3169"
},
{
"category": "external",
"summary": "SUSE Bug 1112142 for CVE-2018-3169",
"url": "https://bugzilla.suse.com/1112142"
},
{
"category": "external",
"summary": "SUSE Bug 1112143 for CVE-2018-3169",
"url": "https://bugzilla.suse.com/1112143"
},
{
"category": "external",
"summary": "SUSE Bug 1112144 for CVE-2018-3169",
"url": "https://bugzilla.suse.com/1112144"
},
{
"category": "external",
"summary": "SUSE Bug 1112146 for CVE-2018-3169",
"url": "https://bugzilla.suse.com/1112146"
},
{
"category": "external",
"summary": "SUSE Bug 1112148 for CVE-2018-3169",
"url": "https://bugzilla.suse.com/1112148"
},
{
"category": "external",
"summary": "SUSE Bug 1112152 for CVE-2018-3169",
"url": "https://bugzilla.suse.com/1112152"
},
{
"category": "external",
"summary": "SUSE Bug 1116574 for CVE-2018-3169",
"url": "https://bugzilla.suse.com/1116574"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Enterprise Storage 4:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.3,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"SUSE Enterprise Storage 4:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-01-09T16:26:14Z",
"details": "moderate"
}
],
"title": "CVE-2018-3169"
},
{
"cve": "CVE-2018-3180",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-3180"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JSSE). Supported versions that are affected are Java SE: 6u201, 7u191, 8u182 and 11; Java SE Embedded: 8u181; JRockit: R28.3.19. Difficult to exploit vulnerability allows unauthenticated attacker with network access via SSL/TLS to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded, JRockit accessible data as well as unauthorized read access to a subset of Java SE, Java SE Embedded, JRockit accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g. code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g. through a web service which supplies data to the APIs. CVSS 3.0 Base Score 5.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Enterprise Storage 4:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-3180",
"url": "https://www.suse.com/security/cve/CVE-2018-3180"
},
{
"category": "external",
"summary": "SUSE Bug 1112142 for CVE-2018-3180",
"url": "https://bugzilla.suse.com/1112142"
},
{
"category": "external",
"summary": "SUSE Bug 1112143 for CVE-2018-3180",
"url": "https://bugzilla.suse.com/1112143"
},
{
"category": "external",
"summary": "SUSE Bug 1112144 for CVE-2018-3180",
"url": "https://bugzilla.suse.com/1112144"
},
{
"category": "external",
"summary": "SUSE Bug 1112146 for CVE-2018-3180",
"url": "https://bugzilla.suse.com/1112146"
},
{
"category": "external",
"summary": "SUSE Bug 1112147 for CVE-2018-3180",
"url": "https://bugzilla.suse.com/1112147"
},
{
"category": "external",
"summary": "SUSE Bug 1112148 for CVE-2018-3180",
"url": "https://bugzilla.suse.com/1112148"
},
{
"category": "external",
"summary": "SUSE Bug 1112152 for CVE-2018-3180",
"url": "https://bugzilla.suse.com/1112152"
},
{
"category": "external",
"summary": "SUSE Bug 1116574 for CVE-2018-3180",
"url": "https://bugzilla.suse.com/1116574"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Enterprise Storage 4:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.6,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L",
"version": "3.0"
},
"products": [
"SUSE Enterprise Storage 4:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-01-09T16:26:14Z",
"details": "moderate"
}
],
"title": "CVE-2018-3180"
},
{
"cve": "CVE-2018-3214",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-3214"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Sound). Supported versions that are affected are Java SE: 6u201, 7u191 and 8u182; Java SE Embedded: 8u181; JRockit: R28.3.19. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g. through a web service which supplies data to the APIs. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Enterprise Storage 4:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-3214",
"url": "https://www.suse.com/security/cve/CVE-2018-3214"
},
{
"category": "external",
"summary": "SUSE Bug 1112142 for CVE-2018-3214",
"url": "https://bugzilla.suse.com/1112142"
},
{
"category": "external",
"summary": "SUSE Bug 1112143 for CVE-2018-3214",
"url": "https://bugzilla.suse.com/1112143"
},
{
"category": "external",
"summary": "SUSE Bug 1112144 for CVE-2018-3214",
"url": "https://bugzilla.suse.com/1112144"
},
{
"category": "external",
"summary": "SUSE Bug 1112146 for CVE-2018-3214",
"url": "https://bugzilla.suse.com/1112146"
},
{
"category": "external",
"summary": "SUSE Bug 1112148 for CVE-2018-3214",
"url": "https://bugzilla.suse.com/1112148"
},
{
"category": "external",
"summary": "SUSE Bug 1112152 for CVE-2018-3214",
"url": "https://bugzilla.suse.com/1112152"
},
{
"category": "external",
"summary": "SUSE Bug 1116574 for CVE-2018-3214",
"url": "https://bugzilla.suse.com/1116574"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Enterprise Storage 4:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"SUSE Enterprise Storage 4:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-01-09T16:26:14Z",
"details": "moderate"
}
],
"title": "CVE-2018-3214"
},
{
"cve": "CVE-2018-3639",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-3639"
}
],
"notes": [
{
"category": "general",
"text": "Systems with microprocessors utilizing speculative execution and speculative execution of memory reads before the addresses of all prior memory writes are known may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis, aka Speculative Store Bypass (SSB), Variant 4.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Enterprise Storage 4:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-3639",
"url": "https://www.suse.com/security/cve/CVE-2018-3639"
},
{
"category": "external",
"summary": "SUSE Bug 1074701 for CVE-2018-3639",
"url": "https://bugzilla.suse.com/1074701"
},
{
"category": "external",
"summary": "SUSE Bug 1085235 for CVE-2018-3639",
"url": "https://bugzilla.suse.com/1085235"
},
{
"category": "external",
"summary": "SUSE Bug 1085308 for CVE-2018-3639",
"url": "https://bugzilla.suse.com/1085308"
},
{
"category": "external",
"summary": "SUSE Bug 1087078 for CVE-2018-3639",
"url": "https://bugzilla.suse.com/1087078"
},
{
"category": "external",
"summary": "SUSE Bug 1087082 for CVE-2018-3639",
"url": "https://bugzilla.suse.com/1087082"
},
{
"category": "external",
"summary": "SUSE Bug 1092631 for CVE-2018-3639",
"url": "https://bugzilla.suse.com/1092631"
},
{
"category": "external",
"summary": "SUSE Bug 1092885 for CVE-2018-3639",
"url": "https://bugzilla.suse.com/1092885"
},
{
"category": "external",
"summary": "SUSE Bug 1094912 for CVE-2018-3639",
"url": "https://bugzilla.suse.com/1094912"
},
{
"category": "external",
"summary": "SUSE Bug 1098813 for CVE-2018-3639",
"url": "https://bugzilla.suse.com/1098813"
},
{
"category": "external",
"summary": "SUSE Bug 1100394 for CVE-2018-3639",
"url": "https://bugzilla.suse.com/1100394"
},
{
"category": "external",
"summary": "SUSE Bug 1102640 for CVE-2018-3639",
"url": "https://bugzilla.suse.com/1102640"
},
{
"category": "external",
"summary": "SUSE Bug 1105412 for CVE-2018-3639",
"url": "https://bugzilla.suse.com/1105412"
},
{
"category": "external",
"summary": "SUSE Bug 1111963 for CVE-2018-3639",
"url": "https://bugzilla.suse.com/1111963"
},
{
"category": "external",
"summary": "SUSE Bug 1172781 for CVE-2018-3639",
"url": "https://bugzilla.suse.com/1172781"
},
{
"category": "external",
"summary": "SUSE Bug 1172782 for CVE-2018-3639",
"url": "https://bugzilla.suse.com/1172782"
},
{
"category": "external",
"summary": "SUSE Bug 1172783 for CVE-2018-3639",
"url": "https://bugzilla.suse.com/1172783"
},
{
"category": "external",
"summary": "SUSE Bug 1173489 for CVE-2018-3639",
"url": "https://bugzilla.suse.com/1173489"
},
{
"category": "external",
"summary": "SUSE Bug 1178658 for CVE-2018-3639",
"url": "https://bugzilla.suse.com/1178658"
},
{
"category": "external",
"summary": "SUSE Bug 1201877 for CVE-2018-3639",
"url": "https://bugzilla.suse.com/1201877"
},
{
"category": "external",
"summary": "SUSE Bug 1215674 for CVE-2018-3639",
"url": "https://bugzilla.suse.com/1215674"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Enterprise Storage 4:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"SUSE Enterprise Storage 4:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-1.7.0.201-43.18.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-1.7.0.201-43.18.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-demo-1.7.0.201-43.18.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-devel-1.7.0.201-43.18.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_0-openjdk-headless-1.7.0.201-43.18.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-01-09T16:26:14Z",
"details": "moderate"
}
],
"title": "CVE-2018-3639"
}
]
}
ghsa-pvp8-49wp-gw4c
Vulnerability from github
Published
2022-05-13 01:16
Modified
2022-05-13 01:16
Severity ?
VLAI Severity ?
Details
Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Concurrency). Supported versions that are affected are Java SE: 6u191, 7u181, 8u172 and 10.0.1; Java SE Embedded: 8u171; JRockit: R28.3.18. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 3.7 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).
{
"affected": [],
"aliases": [
"CVE-2018-2952"
],
"database_specific": {
"cwe_ids": [],
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2018-07-18T13:29:00Z",
"severity": "MODERATE"
},
"details": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Concurrency). Supported versions that are affected are Java SE: 6u191, 7u181, 8u172 and 10.0.1; Java SE Embedded: 8u171; JRockit: R28.3.18. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 3.7 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"id": "GHSA-pvp8-49wp-gw4c",
"modified": "2022-05-13T01:16:50Z",
"published": "2022-05-13T01:16:50Z",
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2952"
},
{
"type": "WEB",
"url": "https://www.debian.org/security/2018/dsa-4268"
},
{
"type": "WEB",
"url": "https://usn.ubuntu.com/3747-1"
},
{
"type": "WEB",
"url": "https://usn.ubuntu.com/3735-1"
},
{
"type": "WEB",
"url": "https://usn.ubuntu.com/3734-1"
},
{
"type": "WEB",
"url": "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbst03928en_us"
},
{
"type": "WEB",
"url": "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbst03882en_us"
},
{
"type": "WEB",
"url": "https://security.netapp.com/advisory/ntap-20180726-0001"
},
{
"type": "WEB",
"url": "https://lists.debian.org/debian-lts-announce/2018/11/msg00026.html"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2018:3008"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2018:3007"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2018:2713"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2018:2712"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2018:2576"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2018:2575"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2018:2569"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2018:2568"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2018:2286"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2018:2283"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2018:2256"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2018:2255"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2018:2254"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2018:2253"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2018:2242"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2018:2241"
},
{
"type": "WEB",
"url": "http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html"
},
{
"type": "WEB",
"url": "http://www.securityfocus.com/bid/104765"
},
{
"type": "WEB",
"url": "http://www.securitytracker.com/id/1041302"
}
],
"schema_version": "1.4.0",
"severity": [
{
"score": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
"type": "CVSS_V3"
}
]
}
fkie_cve-2018-2952
Vulnerability from fkie_nvd
Published
2018-07-18 13:29
Modified
2024-11-21 04:04
Severity ?
Summary
Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Concurrency). Supported versions that are affected are Java SE: 6u191, 7u181, 8u172 and 10.0.1; Java SE Embedded: 8u171; JRockit: R28.3.18. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 3.7 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).
References
| ▶ | URL | Tags | |
|---|---|---|---|
| secalert_us@oracle.com | http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html | Patch, Vendor Advisory | |
| secalert_us@oracle.com | http://www.securityfocus.com/bid/104765 | Broken Link | |
| secalert_us@oracle.com | http://www.securitytracker.com/id/1041302 | Broken Link | |
| secalert_us@oracle.com | https://access.redhat.com/errata/RHSA-2018:2241 | Third Party Advisory | |
| secalert_us@oracle.com | https://access.redhat.com/errata/RHSA-2018:2242 | Third Party Advisory | |
| secalert_us@oracle.com | https://access.redhat.com/errata/RHSA-2018:2253 | Third Party Advisory | |
| secalert_us@oracle.com | https://access.redhat.com/errata/RHSA-2018:2254 | Third Party Advisory | |
| secalert_us@oracle.com | https://access.redhat.com/errata/RHSA-2018:2255 | Third Party Advisory | |
| secalert_us@oracle.com | https://access.redhat.com/errata/RHSA-2018:2256 | Third Party Advisory | |
| secalert_us@oracle.com | https://access.redhat.com/errata/RHSA-2018:2283 | Third Party Advisory | |
| secalert_us@oracle.com | https://access.redhat.com/errata/RHSA-2018:2286 | Third Party Advisory | |
| secalert_us@oracle.com | https://access.redhat.com/errata/RHSA-2018:2568 | Third Party Advisory | |
| secalert_us@oracle.com | https://access.redhat.com/errata/RHSA-2018:2569 | Third Party Advisory | |
| secalert_us@oracle.com | https://access.redhat.com/errata/RHSA-2018:2575 | Third Party Advisory | |
| secalert_us@oracle.com | https://access.redhat.com/errata/RHSA-2018:2576 | Third Party Advisory | |
| secalert_us@oracle.com | https://access.redhat.com/errata/RHSA-2018:2712 | Third Party Advisory | |
| secalert_us@oracle.com | https://access.redhat.com/errata/RHSA-2018:2713 | Third Party Advisory | |
| secalert_us@oracle.com | https://access.redhat.com/errata/RHSA-2018:3007 | Third Party Advisory | |
| secalert_us@oracle.com | https://access.redhat.com/errata/RHSA-2018:3008 | Third Party Advisory | |
| secalert_us@oracle.com | https://lists.debian.org/debian-lts-announce/2018/11/msg00026.html | Mailing List, Third Party Advisory | |
| secalert_us@oracle.com | https://security.netapp.com/advisory/ntap-20180726-0001/ | Third Party Advisory | |
| secalert_us@oracle.com | https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbst03882en_us | Third Party Advisory | |
| secalert_us@oracle.com | https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbst03928en_us | Third Party Advisory | |
| secalert_us@oracle.com | https://usn.ubuntu.com/3734-1/ | Third Party Advisory | |
| secalert_us@oracle.com | https://usn.ubuntu.com/3735-1/ | Third Party Advisory | |
| secalert_us@oracle.com | https://usn.ubuntu.com/3747-1/ | Third Party Advisory | |
| secalert_us@oracle.com | https://www.debian.org/security/2018/dsa-4268 | Third Party Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html | Patch, Vendor Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | http://www.securityfocus.com/bid/104765 | Broken Link | |
| af854a3a-2127-422b-91ae-364da2661108 | http://www.securitytracker.com/id/1041302 | Broken Link | |
| af854a3a-2127-422b-91ae-364da2661108 | https://access.redhat.com/errata/RHSA-2018:2241 | Third Party Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | https://access.redhat.com/errata/RHSA-2018:2242 | Third Party Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | https://access.redhat.com/errata/RHSA-2018:2253 | Third Party Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | https://access.redhat.com/errata/RHSA-2018:2254 | Third Party Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | https://access.redhat.com/errata/RHSA-2018:2255 | Third Party Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | https://access.redhat.com/errata/RHSA-2018:2256 | Third Party Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | https://access.redhat.com/errata/RHSA-2018:2283 | Third Party Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | https://access.redhat.com/errata/RHSA-2018:2286 | Third Party Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | https://access.redhat.com/errata/RHSA-2018:2568 | Third Party Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | https://access.redhat.com/errata/RHSA-2018:2569 | Third Party Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | https://access.redhat.com/errata/RHSA-2018:2575 | Third Party Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | https://access.redhat.com/errata/RHSA-2018:2576 | Third Party Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | https://access.redhat.com/errata/RHSA-2018:2712 | Third Party Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | https://access.redhat.com/errata/RHSA-2018:2713 | Third Party Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | https://access.redhat.com/errata/RHSA-2018:3007 | Third Party Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | https://access.redhat.com/errata/RHSA-2018:3008 | Third Party Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | https://lists.debian.org/debian-lts-announce/2018/11/msg00026.html | Mailing List, Third Party Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | https://security.netapp.com/advisory/ntap-20180726-0001/ | Third Party Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbst03882en_us | Third Party Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbst03928en_us | Third Party Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | https://usn.ubuntu.com/3734-1/ | Third Party Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | https://usn.ubuntu.com/3735-1/ | Third Party Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | https://usn.ubuntu.com/3747-1/ | Third Party Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | https://www.debian.org/security/2018/dsa-4268 | Third Party Advisory |
Impacted products
| Vendor | Product | Version | |
|---|---|---|---|
| oracle | jdk | 1.6.0 | |
| oracle | jdk | 1.7.0 | |
| oracle | jdk | 1.8.0 | |
| oracle | jdk | 10.0.1 | |
| oracle | jre | 1.6.0 | |
| oracle | jre | 1.7.0 | |
| oracle | jre | 1.8.0 | |
| oracle | jre | 10.0.1 | |
| oracle | jrockit | r28.3.18 | |
| debian | debian_linux | 8.0 | |
| debian | debian_linux | 9.0 | |
| canonical | ubuntu_linux | 14.04 | |
| canonical | ubuntu_linux | 16.04 | |
| canonical | ubuntu_linux | 18.04 | |
| hp | xp7_command_view | * | |
| redhat | satellite | 5.6 | |
| redhat | satellite | 5.7 | |
| redhat | satellite | 5.8 | |
| redhat | enterprise_linux_desktop | 6.0 | |
| redhat | enterprise_linux_desktop | 7.0 | |
| redhat | enterprise_linux_eus | 7.5 | |
| redhat | enterprise_linux_eus | 7.6 | |
| redhat | enterprise_linux_eus | 7.7 | |
| redhat | enterprise_linux_server | 6.0 | |
| redhat | enterprise_linux_server | 7.0 | |
| redhat | enterprise_linux_server_aus | 7.6 | |
| redhat | enterprise_linux_server_aus | 7.7 | |
| redhat | enterprise_linux_server_tus | 7.6 | |
| redhat | enterprise_linux_server_tus | 7.7 | |
| redhat | enterprise_linux_workstation | 6.0 | |
| redhat | enterprise_linux_workstation | 7.0 | |
| netapp | active_iq_unified_manager | - | |
| netapp | active_iq_unified_manager | - | |
| netapp | cloud_backup | - | |
| netapp | e-series_santricity_os_controller | * | |
| netapp | e-series_santricity_storage_manager | - | |
| netapp | oncommand_insight | - | |
| netapp | oncommand_unified_manager | - | |
| netapp | oncommand_workflow_automation | - | |
| netapp | plug-in_for_symantec_netbackup | - | |
| netapp | snapmanager | - | |
| netapp | snapmanager | - | |
| netapp | steelstore_cloud_integrated_storage | - | |
| netapp | storage_replication_adapter_for_clustered_data_ontap | * | |
| netapp | vasa_provider_for_clustered_data_ontap | * | |
| netapp | virtual_storage_console | * |
{
"configurations": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:oracle:jdk:1.6.0:update191:*:*:*:*:*:*",
"matchCriteriaId": "0CC16ECF-A6C1-4B1F-B955-3A4694E0A899",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:oracle:jdk:1.7.0:update181:*:*:*:*:*:*",
"matchCriteriaId": "20B37A10-DB47-4CDA-8DAD-CA9BB4362935",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:oracle:jdk:1.8.0:update172:*:*:*:*:*:*",
"matchCriteriaId": "C6BB93E3-3983-40FD-A119-11334C707755",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:oracle:jdk:10.0.1:*:*:*:*:*:*:*",
"matchCriteriaId": "3C103C17-E4A9-40A2-959B-29547D706DFC",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:oracle:jre:1.6.0:update191:*:*:*:*:*:*",
"matchCriteriaId": "D3F946D7-1480-43D7-94B1-10274261922C",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:oracle:jre:1.7.0:update181:*:*:*:*:*:*",
"matchCriteriaId": "F1CBA5EE-A49F-4000-8737-FC2C7F0E8CF7",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:oracle:jre:1.8.0:update172:*:*:*:*:*:*",
"matchCriteriaId": "788BDADB-6F4E-4DFD-BE2E-2D9B3AFBA5CA",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:oracle:jre:10.0.1:*:*:*:*:*:*:*",
"matchCriteriaId": "1EBB11AD-EA72-4C15-945E-D335A1BF0979",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:oracle:jrockit:r28.3.18:*:*:*:*:*:*:*",
"matchCriteriaId": "69344E69-AD89-4E0F-8F35-A207BE2FD23C",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
"matchCriteriaId": "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
"matchCriteriaId": "DEECE5FC-CACF-4496-A3E7-164736409252",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:esm:*:*:*",
"matchCriteriaId": "815D70A8-47D3-459C-A32C-9FEACA0659D1",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:esm:*:*:*",
"matchCriteriaId": "7A5301BF-1402-4BE0-A0F8-69FBE79BC6D6",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*",
"matchCriteriaId": "23A7C53F-B80F-4E6A-AFA9-58EEA84BE11D",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:hp:xp7_command_view:*:*:*:*:advanced:*:*:*",
"matchCriteriaId": "87D4ED85-90F6-47E6-BF08-3595DB22C7B1",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:redhat:satellite:5.6:*:*:*:*:*:*:*",
"matchCriteriaId": "D4840254-CC76-4113-BC61-360BD15582B9",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:redhat:satellite:5.7:*:*:*:*:*:*:*",
"matchCriteriaId": "85EA16E0-9261-45C4-840F-5366E9EAC5E1",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:redhat:satellite:5.8:*:*:*:*:*:*:*",
"matchCriteriaId": "F4F86C3C-B99C-44C6-97D7-163DC3F59687",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
"matchCriteriaId": "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
"matchCriteriaId": "33C068A4-3780-4EAB-A937-6082DF847564",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:redhat:enterprise_linux_eus:7.5:*:*:*:*:*:*:*",
"matchCriteriaId": "0CF73560-2F5B-4723-A8A1-9AADBB3ADA00",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:redhat:enterprise_linux_eus:7.6:*:*:*:*:*:*:*",
"matchCriteriaId": "5BF3C7A5-9117-42C7-BEA1-4AA378A582EF",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:redhat:enterprise_linux_eus:7.7:*:*:*:*:*:*:*",
"matchCriteriaId": "83737173-E12E-4641-BC49-0BD84A6B29D0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
"matchCriteriaId": "9BBCD86A-E6C7-4444-9D74-F861084090F0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
"matchCriteriaId": "51EF4996-72F4-4FA4-814F-F5991E7A8318",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*",
"matchCriteriaId": "B353CE99-D57C-465B-AAB0-73EF581127D1",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.7:*:*:*:*:*:*:*",
"matchCriteriaId": "7431ABC1-9252-419E-8CC1-311B41360078",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:*",
"matchCriteriaId": "B76AA310-FEC7-497F-AF04-C3EC1E76C4CC",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.7:*:*:*:*:*:*:*",
"matchCriteriaId": "17F256A9-D3B9-4C72-B013-4EFD878BFEA8",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
"matchCriteriaId": "E5ED5807-55B7-47C5-97A6-03233F4FBC3A",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
"matchCriteriaId": "825ECE2D-E232-46E0-A047-074B34DB1E97",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:vmware_vsphere:*:*",
"matchCriteriaId": "3A756737-1CC4-42C2-A4DF-E1C893B4E2D5",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:windows:*:*",
"matchCriteriaId": "B55E8D50-99B4-47EC-86F9-699B67D473CE",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:netapp:cloud_backup:-:*:*:*:*:*:*:*",
"matchCriteriaId": "5C2089EE-5D7F-47EC-8EA5-0F69790564C4",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:netapp:e-series_santricity_os_controller:*:*:*:*:*:*:*:*",
"matchCriteriaId": "73F81EC3-4AB0-4CD7-B845-267C5974DE98",
"versionEndIncluding": "11.70.1",
"versionStartIncluding": "11.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:netapp:e-series_santricity_storage_manager:-:*:*:*:*:*:*:*",
"matchCriteriaId": "0D9CC59D-6182-4B5E-96B5-226FCD343916",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:netapp:oncommand_insight:-:*:*:*:*:*:*:*",
"matchCriteriaId": "F1BE6C1F-2565-4E97-92AA-16563E5660A5",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:netapp:oncommand_unified_manager:-:*:*:*:*:*:*:*",
"matchCriteriaId": "C18CA4B5-28FD-4199-B1F0-B1E59E920370",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:netapp:oncommand_workflow_automation:-:*:*:*:*:*:*:*",
"matchCriteriaId": "5735E553-9731-4AAC-BCFF-989377F817B3",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:netapp:plug-in_for_symantec_netbackup:-:*:*:*:*:*:*:*",
"matchCriteriaId": "FFE0A9D2-9A49-4BF6-BC6F-8249162D8334",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:netapp:snapmanager:-:*:*:*:*:oracle:*:*",
"matchCriteriaId": "26A2B713-7D6D-420A-93A4-E0D983C983DF",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:netapp:snapmanager:-:*:*:*:*:sap:*:*",
"matchCriteriaId": "64DE38C8-94F1-4860-B045-F33928F676A8",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:netapp:steelstore_cloud_integrated_storage:-:*:*:*:*:*:*:*",
"matchCriteriaId": "E94F7F59-1785-493F-91A7-5F5EA5E87E4D",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:netapp:storage_replication_adapter_for_clustered_data_ontap:*:*:*:*:*:vmware_vsphere:*:*",
"matchCriteriaId": "9DBEE506-E864-4FC6-B5D3-7E134438592C",
"versionStartIncluding": "9.7",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:netapp:vasa_provider_for_clustered_data_ontap:*:*:*:*:*:*:*:*",
"matchCriteriaId": "5E73AC99-34AC-4D4B-A946-34F33AAEC4A1",
"versionStartIncluding": "9.7",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:netapp:virtual_storage_console:*:*:*:*:*:vmware_vsphere:*:*",
"matchCriteriaId": "D4BE7695-11DB-4F04-A469-91A29A83B358",
"versionStartIncluding": "9.7",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
],
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Concurrency). Supported versions that are affected are Java SE: 6u191, 7u181, 8u172 and 10.0.1; Java SE Embedded: 8u171; JRockit: R28.3.18. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 3.7 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L)."
},
{
"lang": "es",
"value": "Vulnerabilidad en los componentes Java SE, Java SE Embedded y JRockit de Oracle Java SE (subcomponente: Concurrency). Las versiones compatibles que se han visto afectadas son JavaSE: 6u191, 7u181, 8u172 y 10.0.1; Java SE Embedded: 8u171; JRockit: R28.3.18. Una vulnerabilidad dif\u00edcilmente explotable permite que un atacante sin autenticar que tenga acceso a red por m\u00faltiples protocolos comprometa la seguridad de Java SE, Java SE Embedded y JRockit. Los ataques exitosos a esta vulnerabilidad pueden dar lugar a que el atacante consiga provocar una denegaci\u00f3n de servicio parcial (DoS parcial) de Java SE, Java SE Embedded y JRockit. Nota: Esta vulnerabilidad aplica a la implementaci\u00f3n del cliente y el servidor de Java. Esta vulnerabilidad puede ser explotada mediante aplicaciones Java Web Start en sandbox y applets Java en sandbox. Tambi\u00e9n puede ser explotada proporcionando datos a las API en los componentes especificados sin emplear aplicaciones Java Web Start o applets Java en sandbox, como a trav\u00e9s de un servicio web. CVSS 3.0 Base Score 3.7 (impactos en la disponibilidad). Vector CVSS: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L)."
}
],
"id": "CVE-2018-2952",
"lastModified": "2024-11-21T04:04:49.557",
"metrics": {
"cvssMetricV2": [
{
"acInsufInfo": false,
"baseSeverity": "MEDIUM",
"cvssData": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 4.3,
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:P",
"version": "2.0"
},
"exploitabilityScore": 8.6,
"impactScore": 2.9,
"obtainAllPrivilege": false,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": false,
"source": "nvd@nist.gov",
"type": "Primary",
"userInteractionRequired": false
}
],
"cvssMetricV31": [
{
"cvssData": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 3.7,
"baseSeverity": "LOW",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"exploitabilityScore": 2.2,
"impactScore": 1.4,
"source": "nvd@nist.gov",
"type": "Primary"
}
]
},
"published": "2018-07-18T13:29:02.960",
"references": [
{
"source": "secalert_us@oracle.com",
"tags": [
"Patch",
"Vendor Advisory"
],
"url": "http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html"
},
{
"source": "secalert_us@oracle.com",
"tags": [
"Broken Link"
],
"url": "http://www.securityfocus.com/bid/104765"
},
{
"source": "secalert_us@oracle.com",
"tags": [
"Broken Link"
],
"url": "http://www.securitytracker.com/id/1041302"
},
{
"source": "secalert_us@oracle.com",
"tags": [
"Third Party Advisory"
],
"url": "https://access.redhat.com/errata/RHSA-2018:2241"
},
{
"source": "secalert_us@oracle.com",
"tags": [
"Third Party Advisory"
],
"url": "https://access.redhat.com/errata/RHSA-2018:2242"
},
{
"source": "secalert_us@oracle.com",
"tags": [
"Third Party Advisory"
],
"url": "https://access.redhat.com/errata/RHSA-2018:2253"
},
{
"source": "secalert_us@oracle.com",
"tags": [
"Third Party Advisory"
],
"url": "https://access.redhat.com/errata/RHSA-2018:2254"
},
{
"source": "secalert_us@oracle.com",
"tags": [
"Third Party Advisory"
],
"url": "https://access.redhat.com/errata/RHSA-2018:2255"
},
{
"source": "secalert_us@oracle.com",
"tags": [
"Third Party Advisory"
],
"url": "https://access.redhat.com/errata/RHSA-2018:2256"
},
{
"source": "secalert_us@oracle.com",
"tags": [
"Third Party Advisory"
],
"url": "https://access.redhat.com/errata/RHSA-2018:2283"
},
{
"source": "secalert_us@oracle.com",
"tags": [
"Third Party Advisory"
],
"url": "https://access.redhat.com/errata/RHSA-2018:2286"
},
{
"source": "secalert_us@oracle.com",
"tags": [
"Third Party Advisory"
],
"url": "https://access.redhat.com/errata/RHSA-2018:2568"
},
{
"source": "secalert_us@oracle.com",
"tags": [
"Third Party Advisory"
],
"url": "https://access.redhat.com/errata/RHSA-2018:2569"
},
{
"source": "secalert_us@oracle.com",
"tags": [
"Third Party Advisory"
],
"url": "https://access.redhat.com/errata/RHSA-2018:2575"
},
{
"source": "secalert_us@oracle.com",
"tags": [
"Third Party Advisory"
],
"url": "https://access.redhat.com/errata/RHSA-2018:2576"
},
{
"source": "secalert_us@oracle.com",
"tags": [
"Third Party Advisory"
],
"url": "https://access.redhat.com/errata/RHSA-2018:2712"
},
{
"source": "secalert_us@oracle.com",
"tags": [
"Third Party Advisory"
],
"url": "https://access.redhat.com/errata/RHSA-2018:2713"
},
{
"source": "secalert_us@oracle.com",
"tags": [
"Third Party Advisory"
],
"url": "https://access.redhat.com/errata/RHSA-2018:3007"
},
{
"source": "secalert_us@oracle.com",
"tags": [
"Third Party Advisory"
],
"url": "https://access.redhat.com/errata/RHSA-2018:3008"
},
{
"source": "secalert_us@oracle.com",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "https://lists.debian.org/debian-lts-announce/2018/11/msg00026.html"
},
{
"source": "secalert_us@oracle.com",
"tags": [
"Third Party Advisory"
],
"url": "https://security.netapp.com/advisory/ntap-20180726-0001/"
},
{
"source": "secalert_us@oracle.com",
"tags": [
"Third Party Advisory"
],
"url": "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbst03882en_us"
},
{
"source": "secalert_us@oracle.com",
"tags": [
"Third Party Advisory"
],
"url": "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbst03928en_us"
},
{
"source": "secalert_us@oracle.com",
"tags": [
"Third Party Advisory"
],
"url": "https://usn.ubuntu.com/3734-1/"
},
{
"source": "secalert_us@oracle.com",
"tags": [
"Third Party Advisory"
],
"url": "https://usn.ubuntu.com/3735-1/"
},
{
"source": "secalert_us@oracle.com",
"tags": [
"Third Party Advisory"
],
"url": "https://usn.ubuntu.com/3747-1/"
},
{
"source": "secalert_us@oracle.com",
"tags": [
"Third Party Advisory"
],
"url": "https://www.debian.org/security/2018/dsa-4268"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Patch",
"Vendor Advisory"
],
"url": "http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Broken Link"
],
"url": "http://www.securityfocus.com/bid/104765"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Broken Link"
],
"url": "http://www.securitytracker.com/id/1041302"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
],
"url": "https://access.redhat.com/errata/RHSA-2018:2241"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
],
"url": "https://access.redhat.com/errata/RHSA-2018:2242"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
],
"url": "https://access.redhat.com/errata/RHSA-2018:2253"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
],
"url": "https://access.redhat.com/errata/RHSA-2018:2254"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
],
"url": "https://access.redhat.com/errata/RHSA-2018:2255"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
],
"url": "https://access.redhat.com/errata/RHSA-2018:2256"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
],
"url": "https://access.redhat.com/errata/RHSA-2018:2283"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
],
"url": "https://access.redhat.com/errata/RHSA-2018:2286"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
],
"url": "https://access.redhat.com/errata/RHSA-2018:2568"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
],
"url": "https://access.redhat.com/errata/RHSA-2018:2569"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
],
"url": "https://access.redhat.com/errata/RHSA-2018:2575"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
],
"url": "https://access.redhat.com/errata/RHSA-2018:2576"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
],
"url": "https://access.redhat.com/errata/RHSA-2018:2712"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
],
"url": "https://access.redhat.com/errata/RHSA-2018:2713"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
],
"url": "https://access.redhat.com/errata/RHSA-2018:3007"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
],
"url": "https://access.redhat.com/errata/RHSA-2018:3008"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "https://lists.debian.org/debian-lts-announce/2018/11/msg00026.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
],
"url": "https://security.netapp.com/advisory/ntap-20180726-0001/"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
],
"url": "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbst03882en_us"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
],
"url": "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbst03928en_us"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
],
"url": "https://usn.ubuntu.com/3734-1/"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
],
"url": "https://usn.ubuntu.com/3735-1/"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
],
"url": "https://usn.ubuntu.com/3747-1/"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
],
"url": "https://www.debian.org/security/2018/dsa-4268"
}
],
"sourceIdentifier": "secalert_us@oracle.com",
"vulnStatus": "Modified",
"weaknesses": [
{
"description": [
{
"lang": "en",
"value": "NVD-CWE-noinfo"
}
],
"source": "nvd@nist.gov",
"type": "Primary"
}
]
}
opensuse-su-2024:10873-1
Vulnerability from csaf_opensuse
Published
2024-06-15 00:00
Modified
2024-06-15 00:00
Summary
java-15-openjdk-15.0.4.0-2.1 on GA media
Notes
Title of the patch
java-15-openjdk-15.0.4.0-2.1 on GA media
Description of the patch
These are all security issues fixed in the java-15-openjdk-15.0.4.0-2.1 package on the GA media of openSUSE Tumbleweed.
Patchnames
openSUSE-Tumbleweed-2024-10873
Terms of use
CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "java-15-openjdk-15.0.4.0-2.1 on GA media",
"title": "Title of the patch"
},
{
"category": "description",
"text": "These are all security issues fixed in the java-15-openjdk-15.0.4.0-2.1 package on the GA media of openSUSE Tumbleweed.",
"title": "Description of the patch"
},
{
"category": "details",
"text": "openSUSE-Tumbleweed-2024-10873",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2024_10873-1.json"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-11212 page",
"url": "https://www.suse.com/security/cve/CVE-2018-11212/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-2790 page",
"url": "https://www.suse.com/security/cve/CVE-2018-2790/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-2794 page",
"url": "https://www.suse.com/security/cve/CVE-2018-2794/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-2795 page",
"url": "https://www.suse.com/security/cve/CVE-2018-2795/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-2796 page",
"url": "https://www.suse.com/security/cve/CVE-2018-2796/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-2797 page",
"url": "https://www.suse.com/security/cve/CVE-2018-2797/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-2798 page",
"url": "https://www.suse.com/security/cve/CVE-2018-2798/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-2799 page",
"url": "https://www.suse.com/security/cve/CVE-2018-2799/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-2814 page",
"url": "https://www.suse.com/security/cve/CVE-2018-2814/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-2825 page",
"url": "https://www.suse.com/security/cve/CVE-2018-2825/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-2826 page",
"url": "https://www.suse.com/security/cve/CVE-2018-2826/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-2940 page",
"url": "https://www.suse.com/security/cve/CVE-2018-2940/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-2952 page",
"url": "https://www.suse.com/security/cve/CVE-2018-2952/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-2972 page",
"url": "https://www.suse.com/security/cve/CVE-2018-2972/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-2973 page",
"url": "https://www.suse.com/security/cve/CVE-2018-2973/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-3136 page",
"url": "https://www.suse.com/security/cve/CVE-2018-3136/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-3139 page",
"url": "https://www.suse.com/security/cve/CVE-2018-3139/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-3149 page",
"url": "https://www.suse.com/security/cve/CVE-2018-3149/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-3150 page",
"url": "https://www.suse.com/security/cve/CVE-2018-3150/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-3157 page",
"url": "https://www.suse.com/security/cve/CVE-2018-3157/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-3169 page",
"url": "https://www.suse.com/security/cve/CVE-2018-3169/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-3180 page",
"url": "https://www.suse.com/security/cve/CVE-2018-3180/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-3183 page",
"url": "https://www.suse.com/security/cve/CVE-2018-3183/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-2422 page",
"url": "https://www.suse.com/security/cve/CVE-2019-2422/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-2426 page",
"url": "https://www.suse.com/security/cve/CVE-2019-2426/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-2602 page",
"url": "https://www.suse.com/security/cve/CVE-2019-2602/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-2684 page",
"url": "https://www.suse.com/security/cve/CVE-2019-2684/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-14556 page",
"url": "https://www.suse.com/security/cve/CVE-2020-14556/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-14562 page",
"url": "https://www.suse.com/security/cve/CVE-2020-14562/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-14573 page",
"url": "https://www.suse.com/security/cve/CVE-2020-14573/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-14577 page",
"url": "https://www.suse.com/security/cve/CVE-2020-14577/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-14581 page",
"url": "https://www.suse.com/security/cve/CVE-2020-14581/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-14583 page",
"url": "https://www.suse.com/security/cve/CVE-2020-14583/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-14593 page",
"url": "https://www.suse.com/security/cve/CVE-2020-14593/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-14621 page",
"url": "https://www.suse.com/security/cve/CVE-2020-14621/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-14779 page",
"url": "https://www.suse.com/security/cve/CVE-2020-14779/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-14781 page",
"url": "https://www.suse.com/security/cve/CVE-2020-14781/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-14782 page",
"url": "https://www.suse.com/security/cve/CVE-2020-14782/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-14792 page",
"url": "https://www.suse.com/security/cve/CVE-2020-14792/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-14796 page",
"url": "https://www.suse.com/security/cve/CVE-2020-14796/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-14797 page",
"url": "https://www.suse.com/security/cve/CVE-2020-14797/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-14798 page",
"url": "https://www.suse.com/security/cve/CVE-2020-14798/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-14803 page",
"url": "https://www.suse.com/security/cve/CVE-2020-14803/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-2161 page",
"url": "https://www.suse.com/security/cve/CVE-2021-2161/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-2163 page",
"url": "https://www.suse.com/security/cve/CVE-2021-2163/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-2341 page",
"url": "https://www.suse.com/security/cve/CVE-2021-2341/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-2369 page",
"url": "https://www.suse.com/security/cve/CVE-2021-2369/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-2388 page",
"url": "https://www.suse.com/security/cve/CVE-2021-2388/"
}
],
"title": "java-15-openjdk-15.0.4.0-2.1 on GA media",
"tracking": {
"current_release_date": "2024-06-15T00:00:00Z",
"generator": {
"date": "2024-06-15T00:00:00Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "openSUSE-SU-2024:10873-1",
"initial_release_date": "2024-06-15T00:00:00Z",
"revision_history": [
{
"date": "2024-06-15T00:00:00Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "java-15-openjdk-15.0.4.0-2.1.aarch64",
"product": {
"name": "java-15-openjdk-15.0.4.0-2.1.aarch64",
"product_id": "java-15-openjdk-15.0.4.0-2.1.aarch64"
}
},
{
"category": "product_version",
"name": "java-15-openjdk-accessibility-15.0.4.0-2.1.aarch64",
"product": {
"name": "java-15-openjdk-accessibility-15.0.4.0-2.1.aarch64",
"product_id": "java-15-openjdk-accessibility-15.0.4.0-2.1.aarch64"
}
},
{
"category": "product_version",
"name": "java-15-openjdk-demo-15.0.4.0-2.1.aarch64",
"product": {
"name": "java-15-openjdk-demo-15.0.4.0-2.1.aarch64",
"product_id": "java-15-openjdk-demo-15.0.4.0-2.1.aarch64"
}
},
{
"category": "product_version",
"name": "java-15-openjdk-devel-15.0.4.0-2.1.aarch64",
"product": {
"name": "java-15-openjdk-devel-15.0.4.0-2.1.aarch64",
"product_id": "java-15-openjdk-devel-15.0.4.0-2.1.aarch64"
}
},
{
"category": "product_version",
"name": "java-15-openjdk-headless-15.0.4.0-2.1.aarch64",
"product": {
"name": "java-15-openjdk-headless-15.0.4.0-2.1.aarch64",
"product_id": "java-15-openjdk-headless-15.0.4.0-2.1.aarch64"
}
},
{
"category": "product_version",
"name": "java-15-openjdk-javadoc-15.0.4.0-2.1.aarch64",
"product": {
"name": "java-15-openjdk-javadoc-15.0.4.0-2.1.aarch64",
"product_id": "java-15-openjdk-javadoc-15.0.4.0-2.1.aarch64"
}
},
{
"category": "product_version",
"name": "java-15-openjdk-jmods-15.0.4.0-2.1.aarch64",
"product": {
"name": "java-15-openjdk-jmods-15.0.4.0-2.1.aarch64",
"product_id": "java-15-openjdk-jmods-15.0.4.0-2.1.aarch64"
}
},
{
"category": "product_version",
"name": "java-15-openjdk-src-15.0.4.0-2.1.aarch64",
"product": {
"name": "java-15-openjdk-src-15.0.4.0-2.1.aarch64",
"product_id": "java-15-openjdk-src-15.0.4.0-2.1.aarch64"
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "java-15-openjdk-15.0.4.0-2.1.ppc64le",
"product": {
"name": "java-15-openjdk-15.0.4.0-2.1.ppc64le",
"product_id": "java-15-openjdk-15.0.4.0-2.1.ppc64le"
}
},
{
"category": "product_version",
"name": "java-15-openjdk-accessibility-15.0.4.0-2.1.ppc64le",
"product": {
"name": "java-15-openjdk-accessibility-15.0.4.0-2.1.ppc64le",
"product_id": "java-15-openjdk-accessibility-15.0.4.0-2.1.ppc64le"
}
},
{
"category": "product_version",
"name": "java-15-openjdk-demo-15.0.4.0-2.1.ppc64le",
"product": {
"name": "java-15-openjdk-demo-15.0.4.0-2.1.ppc64le",
"product_id": "java-15-openjdk-demo-15.0.4.0-2.1.ppc64le"
}
},
{
"category": "product_version",
"name": "java-15-openjdk-devel-15.0.4.0-2.1.ppc64le",
"product": {
"name": "java-15-openjdk-devel-15.0.4.0-2.1.ppc64le",
"product_id": "java-15-openjdk-devel-15.0.4.0-2.1.ppc64le"
}
},
{
"category": "product_version",
"name": "java-15-openjdk-headless-15.0.4.0-2.1.ppc64le",
"product": {
"name": "java-15-openjdk-headless-15.0.4.0-2.1.ppc64le",
"product_id": "java-15-openjdk-headless-15.0.4.0-2.1.ppc64le"
}
},
{
"category": "product_version",
"name": "java-15-openjdk-javadoc-15.0.4.0-2.1.ppc64le",
"product": {
"name": "java-15-openjdk-javadoc-15.0.4.0-2.1.ppc64le",
"product_id": "java-15-openjdk-javadoc-15.0.4.0-2.1.ppc64le"
}
},
{
"category": "product_version",
"name": "java-15-openjdk-jmods-15.0.4.0-2.1.ppc64le",
"product": {
"name": "java-15-openjdk-jmods-15.0.4.0-2.1.ppc64le",
"product_id": "java-15-openjdk-jmods-15.0.4.0-2.1.ppc64le"
}
},
{
"category": "product_version",
"name": "java-15-openjdk-src-15.0.4.0-2.1.ppc64le",
"product": {
"name": "java-15-openjdk-src-15.0.4.0-2.1.ppc64le",
"product_id": "java-15-openjdk-src-15.0.4.0-2.1.ppc64le"
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "java-15-openjdk-15.0.4.0-2.1.s390x",
"product": {
"name": "java-15-openjdk-15.0.4.0-2.1.s390x",
"product_id": "java-15-openjdk-15.0.4.0-2.1.s390x"
}
},
{
"category": "product_version",
"name": "java-15-openjdk-accessibility-15.0.4.0-2.1.s390x",
"product": {
"name": "java-15-openjdk-accessibility-15.0.4.0-2.1.s390x",
"product_id": "java-15-openjdk-accessibility-15.0.4.0-2.1.s390x"
}
},
{
"category": "product_version",
"name": "java-15-openjdk-demo-15.0.4.0-2.1.s390x",
"product": {
"name": "java-15-openjdk-demo-15.0.4.0-2.1.s390x",
"product_id": "java-15-openjdk-demo-15.0.4.0-2.1.s390x"
}
},
{
"category": "product_version",
"name": "java-15-openjdk-devel-15.0.4.0-2.1.s390x",
"product": {
"name": "java-15-openjdk-devel-15.0.4.0-2.1.s390x",
"product_id": "java-15-openjdk-devel-15.0.4.0-2.1.s390x"
}
},
{
"category": "product_version",
"name": "java-15-openjdk-headless-15.0.4.0-2.1.s390x",
"product": {
"name": "java-15-openjdk-headless-15.0.4.0-2.1.s390x",
"product_id": "java-15-openjdk-headless-15.0.4.0-2.1.s390x"
}
},
{
"category": "product_version",
"name": "java-15-openjdk-javadoc-15.0.4.0-2.1.s390x",
"product": {
"name": "java-15-openjdk-javadoc-15.0.4.0-2.1.s390x",
"product_id": "java-15-openjdk-javadoc-15.0.4.0-2.1.s390x"
}
},
{
"category": "product_version",
"name": "java-15-openjdk-jmods-15.0.4.0-2.1.s390x",
"product": {
"name": "java-15-openjdk-jmods-15.0.4.0-2.1.s390x",
"product_id": "java-15-openjdk-jmods-15.0.4.0-2.1.s390x"
}
},
{
"category": "product_version",
"name": "java-15-openjdk-src-15.0.4.0-2.1.s390x",
"product": {
"name": "java-15-openjdk-src-15.0.4.0-2.1.s390x",
"product_id": "java-15-openjdk-src-15.0.4.0-2.1.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "java-15-openjdk-15.0.4.0-2.1.x86_64",
"product": {
"name": "java-15-openjdk-15.0.4.0-2.1.x86_64",
"product_id": "java-15-openjdk-15.0.4.0-2.1.x86_64"
}
},
{
"category": "product_version",
"name": "java-15-openjdk-accessibility-15.0.4.0-2.1.x86_64",
"product": {
"name": "java-15-openjdk-accessibility-15.0.4.0-2.1.x86_64",
"product_id": "java-15-openjdk-accessibility-15.0.4.0-2.1.x86_64"
}
},
{
"category": "product_version",
"name": "java-15-openjdk-demo-15.0.4.0-2.1.x86_64",
"product": {
"name": "java-15-openjdk-demo-15.0.4.0-2.1.x86_64",
"product_id": "java-15-openjdk-demo-15.0.4.0-2.1.x86_64"
}
},
{
"category": "product_version",
"name": "java-15-openjdk-devel-15.0.4.0-2.1.x86_64",
"product": {
"name": "java-15-openjdk-devel-15.0.4.0-2.1.x86_64",
"product_id": "java-15-openjdk-devel-15.0.4.0-2.1.x86_64"
}
},
{
"category": "product_version",
"name": "java-15-openjdk-headless-15.0.4.0-2.1.x86_64",
"product": {
"name": "java-15-openjdk-headless-15.0.4.0-2.1.x86_64",
"product_id": "java-15-openjdk-headless-15.0.4.0-2.1.x86_64"
}
},
{
"category": "product_version",
"name": "java-15-openjdk-javadoc-15.0.4.0-2.1.x86_64",
"product": {
"name": "java-15-openjdk-javadoc-15.0.4.0-2.1.x86_64",
"product_id": "java-15-openjdk-javadoc-15.0.4.0-2.1.x86_64"
}
},
{
"category": "product_version",
"name": "java-15-openjdk-jmods-15.0.4.0-2.1.x86_64",
"product": {
"name": "java-15-openjdk-jmods-15.0.4.0-2.1.x86_64",
"product_id": "java-15-openjdk-jmods-15.0.4.0-2.1.x86_64"
}
},
{
"category": "product_version",
"name": "java-15-openjdk-src-15.0.4.0-2.1.x86_64",
"product": {
"name": "java-15-openjdk-src-15.0.4.0-2.1.x86_64",
"product_id": "java-15-openjdk-src-15.0.4.0-2.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "openSUSE Tumbleweed",
"product": {
"name": "openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed",
"product_identification_helper": {
"cpe": "cpe:/o:opensuse:tumbleweed"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "java-15-openjdk-15.0.4.0-2.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.aarch64"
},
"product_reference": "java-15-openjdk-15.0.4.0-2.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-15-openjdk-15.0.4.0-2.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.ppc64le"
},
"product_reference": "java-15-openjdk-15.0.4.0-2.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-15-openjdk-15.0.4.0-2.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.s390x"
},
"product_reference": "java-15-openjdk-15.0.4.0-2.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-15-openjdk-15.0.4.0-2.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.x86_64"
},
"product_reference": "java-15-openjdk-15.0.4.0-2.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-15-openjdk-accessibility-15.0.4.0-2.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.aarch64"
},
"product_reference": "java-15-openjdk-accessibility-15.0.4.0-2.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-15-openjdk-accessibility-15.0.4.0-2.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.ppc64le"
},
"product_reference": "java-15-openjdk-accessibility-15.0.4.0-2.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-15-openjdk-accessibility-15.0.4.0-2.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.s390x"
},
"product_reference": "java-15-openjdk-accessibility-15.0.4.0-2.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-15-openjdk-accessibility-15.0.4.0-2.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.x86_64"
},
"product_reference": "java-15-openjdk-accessibility-15.0.4.0-2.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-15-openjdk-demo-15.0.4.0-2.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.aarch64"
},
"product_reference": "java-15-openjdk-demo-15.0.4.0-2.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-15-openjdk-demo-15.0.4.0-2.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.ppc64le"
},
"product_reference": "java-15-openjdk-demo-15.0.4.0-2.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-15-openjdk-demo-15.0.4.0-2.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.s390x"
},
"product_reference": "java-15-openjdk-demo-15.0.4.0-2.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-15-openjdk-demo-15.0.4.0-2.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.x86_64"
},
"product_reference": "java-15-openjdk-demo-15.0.4.0-2.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-15-openjdk-devel-15.0.4.0-2.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.aarch64"
},
"product_reference": "java-15-openjdk-devel-15.0.4.0-2.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-15-openjdk-devel-15.0.4.0-2.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.ppc64le"
},
"product_reference": "java-15-openjdk-devel-15.0.4.0-2.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-15-openjdk-devel-15.0.4.0-2.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.s390x"
},
"product_reference": "java-15-openjdk-devel-15.0.4.0-2.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-15-openjdk-devel-15.0.4.0-2.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.x86_64"
},
"product_reference": "java-15-openjdk-devel-15.0.4.0-2.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-15-openjdk-headless-15.0.4.0-2.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.aarch64"
},
"product_reference": "java-15-openjdk-headless-15.0.4.0-2.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-15-openjdk-headless-15.0.4.0-2.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.ppc64le"
},
"product_reference": "java-15-openjdk-headless-15.0.4.0-2.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-15-openjdk-headless-15.0.4.0-2.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.s390x"
},
"product_reference": "java-15-openjdk-headless-15.0.4.0-2.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-15-openjdk-headless-15.0.4.0-2.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.x86_64"
},
"product_reference": "java-15-openjdk-headless-15.0.4.0-2.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-15-openjdk-javadoc-15.0.4.0-2.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.aarch64"
},
"product_reference": "java-15-openjdk-javadoc-15.0.4.0-2.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-15-openjdk-javadoc-15.0.4.0-2.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.ppc64le"
},
"product_reference": "java-15-openjdk-javadoc-15.0.4.0-2.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-15-openjdk-javadoc-15.0.4.0-2.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.s390x"
},
"product_reference": "java-15-openjdk-javadoc-15.0.4.0-2.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-15-openjdk-javadoc-15.0.4.0-2.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.x86_64"
},
"product_reference": "java-15-openjdk-javadoc-15.0.4.0-2.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-15-openjdk-jmods-15.0.4.0-2.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.aarch64"
},
"product_reference": "java-15-openjdk-jmods-15.0.4.0-2.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-15-openjdk-jmods-15.0.4.0-2.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.ppc64le"
},
"product_reference": "java-15-openjdk-jmods-15.0.4.0-2.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-15-openjdk-jmods-15.0.4.0-2.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.s390x"
},
"product_reference": "java-15-openjdk-jmods-15.0.4.0-2.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-15-openjdk-jmods-15.0.4.0-2.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.x86_64"
},
"product_reference": "java-15-openjdk-jmods-15.0.4.0-2.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-15-openjdk-src-15.0.4.0-2.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.aarch64"
},
"product_reference": "java-15-openjdk-src-15.0.4.0-2.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-15-openjdk-src-15.0.4.0-2.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.ppc64le"
},
"product_reference": "java-15-openjdk-src-15.0.4.0-2.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-15-openjdk-src-15.0.4.0-2.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.s390x"
},
"product_reference": "java-15-openjdk-src-15.0.4.0-2.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-15-openjdk-src-15.0.4.0-2.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.x86_64"
},
"product_reference": "java-15-openjdk-src-15.0.4.0-2.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2018-11212",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-11212"
}
],
"notes": [
{
"category": "general",
"text": "An issue was discovered in libjpeg 9a and 9d. The alloc_sarray function in jmemmgr.c allows remote attackers to cause a denial of service (divide-by-zero error) via a crafted file.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-11212",
"url": "https://www.suse.com/security/cve/CVE-2018-11212"
},
{
"category": "external",
"summary": "SUSE Bug 1122299 for CVE-2018-11212",
"url": "https://bugzilla.suse.com/1122299"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2018-11212"
},
{
"cve": "CVE-2018-2790",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-2790"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u181, 7u171, 8u162 and 10; Java SE Embedded: 8u161. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 3.1 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-2790",
"url": "https://www.suse.com/security/cve/CVE-2018-2790"
},
{
"category": "external",
"summary": "SUSE Bug 1090023 for CVE-2018-2790",
"url": "https://bugzilla.suse.com/1090023"
},
{
"category": "external",
"summary": "SUSE Bug 1093311 for CVE-2018-2790",
"url": "https://bugzilla.suse.com/1093311"
},
{
"category": "external",
"summary": "SUSE Bug 1101637 for CVE-2018-2790",
"url": "https://bugzilla.suse.com/1101637"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.1,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2018-2790"
},
{
"cve": "CVE-2018-2794",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-2794"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, JRockit component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u181, 7u171, 8u162, 10 and JRockit: R28.3.17. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Java SE, JRockit executes to compromise Java SE, JRockit. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, JRockit, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 7.7 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-2794",
"url": "https://www.suse.com/security/cve/CVE-2018-2794"
},
{
"category": "external",
"summary": "SUSE Bug 1090024 for CVE-2018-2794",
"url": "https://bugzilla.suse.com/1090024"
},
{
"category": "external",
"summary": "SUSE Bug 1093311 for CVE-2018-2794",
"url": "https://bugzilla.suse.com/1093311"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-2794"
},
{
"cve": "CVE-2018-2795",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-2795"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u181, 7u171, 8u162 and 10; Java SE Embedded: 8u161; JRockit: R28.3.17. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-2795",
"url": "https://www.suse.com/security/cve/CVE-2018-2795"
},
{
"category": "external",
"summary": "SUSE Bug 1090025 for CVE-2018-2795",
"url": "https://bugzilla.suse.com/1090025"
},
{
"category": "external",
"summary": "SUSE Bug 1093311 for CVE-2018-2795",
"url": "https://bugzilla.suse.com/1093311"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-2795"
},
{
"cve": "CVE-2018-2796",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-2796"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Concurrency). Supported versions that are affected are Java SE: 7u171, 8u162 and 10; Java SE Embedded: 8u161; JRockit: R28.3.17. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-2796",
"url": "https://www.suse.com/security/cve/CVE-2018-2796"
},
{
"category": "external",
"summary": "SUSE Bug 1090026 for CVE-2018-2796",
"url": "https://bugzilla.suse.com/1090026"
},
{
"category": "external",
"summary": "SUSE Bug 1093311 for CVE-2018-2796",
"url": "https://bugzilla.suse.com/1093311"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-2796"
},
{
"cve": "CVE-2018-2797",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-2797"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JMX). Supported versions that are affected are Java SE: 6u181, 7u171, 8u162 and 10; Java SE Embedded: 8u161; JRockit: R28.3.17. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-2797",
"url": "https://www.suse.com/security/cve/CVE-2018-2797"
},
{
"category": "external",
"summary": "SUSE Bug 1090027 for CVE-2018-2797",
"url": "https://bugzilla.suse.com/1090027"
},
{
"category": "external",
"summary": "SUSE Bug 1093311 for CVE-2018-2797",
"url": "https://bugzilla.suse.com/1093311"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-2797"
},
{
"cve": "CVE-2018-2798",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-2798"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: AWT). Supported versions that are affected are Java SE: 6u181, 7u171, 8u162 and 10; Java SE Embedded: 8u161; JRockit: R28.3.17. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-2798",
"url": "https://www.suse.com/security/cve/CVE-2018-2798"
},
{
"category": "external",
"summary": "SUSE Bug 1090028 for CVE-2018-2798",
"url": "https://bugzilla.suse.com/1090028"
},
{
"category": "external",
"summary": "SUSE Bug 1093311 for CVE-2018-2798",
"url": "https://bugzilla.suse.com/1093311"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-2798"
},
{
"cve": "CVE-2018-2799",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-2799"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JAXP). Supported versions that are affected are Java SE: 7u171, 8u162 and 10; Java SE Embedded: 8u161; JRockit: R28.3.17. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-2799",
"url": "https://www.suse.com/security/cve/CVE-2018-2799"
},
{
"category": "external",
"summary": "SUSE Bug 1090029 for CVE-2018-2799",
"url": "https://bugzilla.suse.com/1090029"
},
{
"category": "external",
"summary": "SUSE Bug 1093311 for CVE-2018-2799",
"url": "https://bugzilla.suse.com/1093311"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-2799"
},
{
"cve": "CVE-2018-2814",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-2814"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Hotspot). Supported versions that are affected are Java SE: 6u181, 7u171, 8u162 and 10; Java SE Embedded: 8u161. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, Java SE Embedded, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 8.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-2814",
"url": "https://www.suse.com/security/cve/CVE-2018-2814"
},
{
"category": "external",
"summary": "SUSE Bug 1090032 for CVE-2018-2814",
"url": "https://bugzilla.suse.com/1090032"
},
{
"category": "external",
"summary": "SUSE Bug 1093311 for CVE-2018-2814",
"url": "https://bugzilla.suse.com/1093311"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-2814"
},
{
"cve": "CVE-2018-2825",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-2825"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Libraries). The supported version that is affected is Java SE: 10. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 8.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-2825",
"url": "https://www.suse.com/security/cve/CVE-2018-2825"
},
{
"category": "external",
"summary": "SUSE Bug 1090196 for CVE-2018-2825",
"url": "https://bugzilla.suse.com/1090196"
},
{
"category": "external",
"summary": "SUSE Bug 1093311 for CVE-2018-2825",
"url": "https://bugzilla.suse.com/1093311"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.3,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-2825"
},
{
"cve": "CVE-2018-2826",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-2826"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Libraries). The supported version that is affected is Java SE: 10. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 8.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-2826",
"url": "https://www.suse.com/security/cve/CVE-2018-2826"
},
{
"category": "external",
"summary": "SUSE Bug 1090197 for CVE-2018-2826",
"url": "https://bugzilla.suse.com/1090197"
},
{
"category": "external",
"summary": "SUSE Bug 1093311 for CVE-2018-2826",
"url": "https://bugzilla.suse.com/1093311"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.3,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-2826"
},
{
"cve": "CVE-2018-2940",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-2940"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries). Supported versions that are affected are Java SE: 6u191, 7u181, 8u172 and 10.0.1; Java SE Embedded: 8u171. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 4.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-2940",
"url": "https://www.suse.com/security/cve/CVE-2018-2940"
},
{
"category": "external",
"summary": "SUSE Bug 1101645 for CVE-2018-2940",
"url": "https://bugzilla.suse.com/1101645"
},
{
"category": "external",
"summary": "SUSE Bug 1101656 for CVE-2018-2940",
"url": "https://bugzilla.suse.com/1101656"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-2940"
},
{
"cve": "CVE-2018-2952",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-2952"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Concurrency). Supported versions that are affected are Java SE: 6u191, 7u181, 8u172 and 10.0.1; Java SE Embedded: 8u171; JRockit: R28.3.18. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 3.7 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-2952",
"url": "https://www.suse.com/security/cve/CVE-2018-2952"
},
{
"category": "external",
"summary": "SUSE Bug 1101645 for CVE-2018-2952",
"url": "https://bugzilla.suse.com/1101645"
},
{
"category": "external",
"summary": "SUSE Bug 1101651 for CVE-2018-2952",
"url": "https://bugzilla.suse.com/1101651"
},
{
"category": "external",
"summary": "SUSE Bug 1101656 for CVE-2018-2952",
"url": "https://bugzilla.suse.com/1101656"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-2952"
},
{
"cve": "CVE-2018-2972",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-2972"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Security). The supported version that is affected is Java SE: 10.0.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Java SE accessible data. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 5.9 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-2972",
"url": "https://www.suse.com/security/cve/CVE-2018-2972"
},
{
"category": "external",
"summary": "SUSE Bug 1101655 for CVE-2018-2972",
"url": "https://bugzilla.suse.com/1101655"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-2972"
},
{
"cve": "CVE-2018-2973",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-2973"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: JSSE). Supported versions that are affected are Java SE: 6u191, 7u181, 8u172 and 10.0.1; Java SE Embedded: 8u171. Difficult to exploit vulnerability allows unauthenticated attacker with network access via SSL/TLS to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 5.9 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-2973",
"url": "https://www.suse.com/security/cve/CVE-2018-2973"
},
{
"category": "external",
"summary": "SUSE Bug 1101645 for CVE-2018-2973",
"url": "https://bugzilla.suse.com/1101645"
},
{
"category": "external",
"summary": "SUSE Bug 1101656 for CVE-2018-2973",
"url": "https://bugzilla.suse.com/1101656"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-2973"
},
{
"cve": "CVE-2018-3136",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-3136"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u201, 7u191, 8u182 and 11; Java SE Embedded: 8u181. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, Java SE Embedded, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g. code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g. code installed by an administrator). CVSS 3.0 Base Score 3.4 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:L/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-3136",
"url": "https://www.suse.com/security/cve/CVE-2018-3136"
},
{
"category": "external",
"summary": "SUSE Bug 1112142 for CVE-2018-3136",
"url": "https://bugzilla.suse.com/1112142"
},
{
"category": "external",
"summary": "SUSE Bug 1112143 for CVE-2018-3136",
"url": "https://bugzilla.suse.com/1112143"
},
{
"category": "external",
"summary": "SUSE Bug 1112144 for CVE-2018-3136",
"url": "https://bugzilla.suse.com/1112144"
},
{
"category": "external",
"summary": "SUSE Bug 1112146 for CVE-2018-3136",
"url": "https://bugzilla.suse.com/1112146"
},
{
"category": "external",
"summary": "SUSE Bug 1112148 for CVE-2018-3136",
"url": "https://bugzilla.suse.com/1112148"
},
{
"category": "external",
"summary": "SUSE Bug 1112152 for CVE-2018-3136",
"url": "https://bugzilla.suse.com/1112152"
},
{
"category": "external",
"summary": "SUSE Bug 1116574 for CVE-2018-3136",
"url": "https://bugzilla.suse.com/1116574"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.1,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-3136"
},
{
"cve": "CVE-2018-3139",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-3139"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Networking). Supported versions that are affected are Java SE: 6u201, 7u191, 8u182 and 11; Java SE Embedded: 8u181. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g. code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g. code installed by an administrator). CVSS 3.0 Base Score 3.1 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-3139",
"url": "https://www.suse.com/security/cve/CVE-2018-3139"
},
{
"category": "external",
"summary": "SUSE Bug 1112142 for CVE-2018-3139",
"url": "https://bugzilla.suse.com/1112142"
},
{
"category": "external",
"summary": "SUSE Bug 1112143 for CVE-2018-3139",
"url": "https://bugzilla.suse.com/1112143"
},
{
"category": "external",
"summary": "SUSE Bug 1112144 for CVE-2018-3139",
"url": "https://bugzilla.suse.com/1112144"
},
{
"category": "external",
"summary": "SUSE Bug 1112146 for CVE-2018-3139",
"url": "https://bugzilla.suse.com/1112146"
},
{
"category": "external",
"summary": "SUSE Bug 1112148 for CVE-2018-3139",
"url": "https://bugzilla.suse.com/1112148"
},
{
"category": "external",
"summary": "SUSE Bug 1112152 for CVE-2018-3139",
"url": "https://bugzilla.suse.com/1112152"
},
{
"category": "external",
"summary": "SUSE Bug 1116574 for CVE-2018-3139",
"url": "https://bugzilla.suse.com/1116574"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.1,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-3139"
},
{
"cve": "CVE-2018-3149",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-3149"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JNDI). Supported versions that are affected are Java SE: 6u201, 7u191, 8u182 and 11; Java SE Embedded: 8u181; JRockit: R28.3.19. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, Java SE Embedded, JRockit, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE, Java SE Embedded, JRockit. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g. code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g. through a web service which supplies data to the APIs. CVSS 3.0 Base Score 8.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-3149",
"url": "https://www.suse.com/security/cve/CVE-2018-3149"
},
{
"category": "external",
"summary": "SUSE Bug 1112142 for CVE-2018-3149",
"url": "https://bugzilla.suse.com/1112142"
},
{
"category": "external",
"summary": "SUSE Bug 1112143 for CVE-2018-3149",
"url": "https://bugzilla.suse.com/1112143"
},
{
"category": "external",
"summary": "SUSE Bug 1112144 for CVE-2018-3149",
"url": "https://bugzilla.suse.com/1112144"
},
{
"category": "external",
"summary": "SUSE Bug 1112146 for CVE-2018-3149",
"url": "https://bugzilla.suse.com/1112146"
},
{
"category": "external",
"summary": "SUSE Bug 1112148 for CVE-2018-3149",
"url": "https://bugzilla.suse.com/1112148"
},
{
"category": "external",
"summary": "SUSE Bug 1112152 for CVE-2018-3149",
"url": "https://bugzilla.suse.com/1112152"
},
{
"category": "external",
"summary": "SUSE Bug 1116574 for CVE-2018-3149",
"url": "https://bugzilla.suse.com/1116574"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.3,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-3149"
},
{
"cve": "CVE-2018-3150",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-3150"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Utility). The supported version that is affected is Java SE: 11. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE accessible data. Note: This vulnerability applies to Java deployments that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 3.7 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-3150",
"url": "https://www.suse.com/security/cve/CVE-2018-3150"
},
{
"category": "external",
"summary": "SUSE Bug 1112145 for CVE-2018-3150",
"url": "https://bugzilla.suse.com/1112145"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-3150"
},
{
"cve": "CVE-2018-3157",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-3157"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Sound). The supported version that is affected is Java SE: 11. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE accessible data. Note: This vulnerability applies to Java deployments that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 3.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-3157",
"url": "https://www.suse.com/security/cve/CVE-2018-3157"
},
{
"category": "external",
"summary": "SUSE Bug 1112149 for CVE-2018-3157",
"url": "https://bugzilla.suse.com/1112149"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-3157"
},
{
"cve": "CVE-2018-3169",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-3169"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Hotspot). Supported versions that are affected are Java SE: 7u191, 8u182 and 11; Java SE Embedded: 8u181. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, Java SE Embedded, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g. code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g. code installed by an administrator). CVSS 3.0 Base Score 8.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-3169",
"url": "https://www.suse.com/security/cve/CVE-2018-3169"
},
{
"category": "external",
"summary": "SUSE Bug 1112142 for CVE-2018-3169",
"url": "https://bugzilla.suse.com/1112142"
},
{
"category": "external",
"summary": "SUSE Bug 1112143 for CVE-2018-3169",
"url": "https://bugzilla.suse.com/1112143"
},
{
"category": "external",
"summary": "SUSE Bug 1112144 for CVE-2018-3169",
"url": "https://bugzilla.suse.com/1112144"
},
{
"category": "external",
"summary": "SUSE Bug 1112146 for CVE-2018-3169",
"url": "https://bugzilla.suse.com/1112146"
},
{
"category": "external",
"summary": "SUSE Bug 1112148 for CVE-2018-3169",
"url": "https://bugzilla.suse.com/1112148"
},
{
"category": "external",
"summary": "SUSE Bug 1112152 for CVE-2018-3169",
"url": "https://bugzilla.suse.com/1112152"
},
{
"category": "external",
"summary": "SUSE Bug 1116574 for CVE-2018-3169",
"url": "https://bugzilla.suse.com/1116574"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.3,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-3169"
},
{
"cve": "CVE-2018-3180",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-3180"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JSSE). Supported versions that are affected are Java SE: 6u201, 7u191, 8u182 and 11; Java SE Embedded: 8u181; JRockit: R28.3.19. Difficult to exploit vulnerability allows unauthenticated attacker with network access via SSL/TLS to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded, JRockit accessible data as well as unauthorized read access to a subset of Java SE, Java SE Embedded, JRockit accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g. code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g. through a web service which supplies data to the APIs. CVSS 3.0 Base Score 5.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-3180",
"url": "https://www.suse.com/security/cve/CVE-2018-3180"
},
{
"category": "external",
"summary": "SUSE Bug 1112142 for CVE-2018-3180",
"url": "https://bugzilla.suse.com/1112142"
},
{
"category": "external",
"summary": "SUSE Bug 1112143 for CVE-2018-3180",
"url": "https://bugzilla.suse.com/1112143"
},
{
"category": "external",
"summary": "SUSE Bug 1112144 for CVE-2018-3180",
"url": "https://bugzilla.suse.com/1112144"
},
{
"category": "external",
"summary": "SUSE Bug 1112146 for CVE-2018-3180",
"url": "https://bugzilla.suse.com/1112146"
},
{
"category": "external",
"summary": "SUSE Bug 1112147 for CVE-2018-3180",
"url": "https://bugzilla.suse.com/1112147"
},
{
"category": "external",
"summary": "SUSE Bug 1112148 for CVE-2018-3180",
"url": "https://bugzilla.suse.com/1112148"
},
{
"category": "external",
"summary": "SUSE Bug 1112152 for CVE-2018-3180",
"url": "https://bugzilla.suse.com/1112152"
},
{
"category": "external",
"summary": "SUSE Bug 1116574 for CVE-2018-3180",
"url": "https://bugzilla.suse.com/1116574"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.6,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-3180"
},
{
"cve": "CVE-2018-3183",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-3183"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Scripting). Supported versions that are affected are Java SE: 8u182 and 11; Java SE Embedded: 8u181; JRockit: R28.3.19. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. While the vulnerability is in Java SE, Java SE Embedded, JRockit, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE, Java SE Embedded, JRockit. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g. code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g. through a web service which supplies data to the APIs. CVSS 3.0 Base Score 9.0 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-3183",
"url": "https://www.suse.com/security/cve/CVE-2018-3183"
},
{
"category": "external",
"summary": "SUSE Bug 1112142 for CVE-2018-3183",
"url": "https://bugzilla.suse.com/1112142"
},
{
"category": "external",
"summary": "SUSE Bug 1112143 for CVE-2018-3183",
"url": "https://bugzilla.suse.com/1112143"
},
{
"category": "external",
"summary": "SUSE Bug 1112144 for CVE-2018-3183",
"url": "https://bugzilla.suse.com/1112144"
},
{
"category": "external",
"summary": "SUSE Bug 1112146 for CVE-2018-3183",
"url": "https://bugzilla.suse.com/1112146"
},
{
"category": "external",
"summary": "SUSE Bug 1112148 for CVE-2018-3183",
"url": "https://bugzilla.suse.com/1112148"
},
{
"category": "external",
"summary": "SUSE Bug 1112152 for CVE-2018-3183",
"url": "https://bugzilla.suse.com/1112152"
},
{
"category": "external",
"summary": "SUSE Bug 1116574 for CVE-2018-3183",
"url": "https://bugzilla.suse.com/1116574"
},
{
"category": "external",
"summary": "SUSE Bug 1120714 for CVE-2018-3183",
"url": "https://bugzilla.suse.com/1120714"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2018-3183"
},
{
"cve": "CVE-2019-2422",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-2422"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Libraries). Supported versions that are affected are Java SE: 7u201, 8u192 and 11.0.1; Java SE Embedded: 8u191. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 3.1 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-2422",
"url": "https://www.suse.com/security/cve/CVE-2019-2422"
},
{
"category": "external",
"summary": "SUSE Bug 1122293 for CVE-2019-2422",
"url": "https://bugzilla.suse.com/1122293"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.1,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-2422"
},
{
"cve": "CVE-2019-2426",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-2426"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Networking). Supported versions that are affected are Java SE: 7u201, 8u192 and 11.0.1; Java SE Embedded: 8u191. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 3.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-2426",
"url": "https://www.suse.com/security/cve/CVE-2019-2426"
},
{
"category": "external",
"summary": "SUSE Bug 1134297 for CVE-2019-2426",
"url": "https://bugzilla.suse.com/1134297"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-2426"
},
{
"cve": "CVE-2019-2602",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-2602"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries). Supported versions that are affected are Java SE: 7u211, 8u202, 11.0.2 and 12; Java SE Embedded: 8u201. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Java SE, Java SE Embedded. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.0 Base Score 7.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-2602",
"url": "https://www.suse.com/security/cve/CVE-2019-2602"
},
{
"category": "external",
"summary": "SUSE Bug 1132728 for CVE-2019-2602",
"url": "https://bugzilla.suse.com/1132728"
},
{
"category": "external",
"summary": "SUSE Bug 1134718 for CVE-2019-2602",
"url": "https://bugzilla.suse.com/1134718"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-2602"
},
{
"cve": "CVE-2019-2684",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-2684"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: RMI). Supported versions that are affected are Java SE: 7u211, 8u202, 11.0.2 and 12; Java SE Embedded: 8u201. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 5.9 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-2684",
"url": "https://www.suse.com/security/cve/CVE-2019-2684"
},
{
"category": "external",
"summary": "SUSE Bug 1132732 for CVE-2019-2684",
"url": "https://bugzilla.suse.com/1132732"
},
{
"category": "external",
"summary": "SUSE Bug 1134718 for CVE-2019-2684",
"url": "https://bugzilla.suse.com/1134718"
},
{
"category": "external",
"summary": "SUSE Bug 1184734 for CVE-2019-2684",
"url": "https://bugzilla.suse.com/1184734"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-2684"
},
{
"cve": "CVE-2020-14556",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-14556"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 8u251, 11.0.7 and 14.0.1; Java SE Embedded: 8u251. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded accessible data as well as unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.1 Base Score 4.8 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-14556",
"url": "https://www.suse.com/security/cve/CVE-2020-14556"
},
{
"category": "external",
"summary": "SUSE Bug 1174157 for CVE-2020-14556",
"url": "https://bugzilla.suse.com/1174157"
},
{
"category": "external",
"summary": "SUSE Bug 1175259 for CVE-2020-14556",
"url": "https://bugzilla.suse.com/1175259"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.8,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-14556"
},
{
"cve": "CVE-2020-14562",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-14562"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE product of Oracle Java SE (component: ImageIO). Supported versions that are affected are Java SE: 11.0.7 and 14.0.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-14562",
"url": "https://www.suse.com/security/cve/CVE-2020-14562"
},
{
"category": "external",
"summary": "SUSE Bug 1174157 for CVE-2020-14562",
"url": "https://bugzilla.suse.com/1174157"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-14562"
},
{
"cve": "CVE-2020-14573",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-14573"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE product of Oracle Java SE (component: Hotspot). Supported versions that are affected are Java SE: 11.0.7 and 14.0.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE accessible data. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.1 Base Score 3.7 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-14573",
"url": "https://www.suse.com/security/cve/CVE-2020-14573"
},
{
"category": "external",
"summary": "SUSE Bug 1174157 for CVE-2020-14573",
"url": "https://bugzilla.suse.com/1174157"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-14573"
},
{
"cve": "CVE-2020-14577",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-14577"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JSSE). Supported versions that are affected are Java SE: 7u261, 8u251, 11.0.7 and 14.0.1; Java SE Embedded: 8u251. Difficult to exploit vulnerability allows unauthenticated attacker with network access via TLS to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.1 Base Score 3.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-14577",
"url": "https://www.suse.com/security/cve/CVE-2020-14577"
},
{
"category": "external",
"summary": "SUSE Bug 1174157 for CVE-2020-14577",
"url": "https://bugzilla.suse.com/1174157"
},
{
"category": "external",
"summary": "SUSE Bug 1175259 for CVE-2020-14577",
"url": "https://bugzilla.suse.com/1175259"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-14577"
},
{
"cve": "CVE-2020-14581",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-14581"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: 2D). Supported versions that are affected are Java SE: 8u251, 11.0.7 and 14.0.1; Java SE Embedded: 8u251. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.1 Base Score 3.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-14581",
"url": "https://www.suse.com/security/cve/CVE-2020-14581"
},
{
"category": "external",
"summary": "SUSE Bug 1174157 for CVE-2020-14581",
"url": "https://bugzilla.suse.com/1174157"
},
{
"category": "external",
"summary": "SUSE Bug 1175259 for CVE-2020-14581",
"url": "https://bugzilla.suse.com/1175259"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-14581"
},
{
"cve": "CVE-2020-14583",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-14583"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u261, 8u251, 11.0.7 and 14.0.1; Java SE Embedded: 8u251. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, Java SE Embedded, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 8.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-14583",
"url": "https://www.suse.com/security/cve/CVE-2020-14583"
},
{
"category": "external",
"summary": "SUSE Bug 1174157 for CVE-2020-14583",
"url": "https://bugzilla.suse.com/1174157"
},
{
"category": "external",
"summary": "SUSE Bug 1175259 for CVE-2020-14583",
"url": "https://bugzilla.suse.com/1175259"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.3,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-14583"
},
{
"cve": "CVE-2020-14593",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-14593"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: 2D). Supported versions that are affected are Java SE: 7u261, 8u251, 11.0.7 and 14.0.1; Java SE Embedded: 8u251. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, Java SE Embedded, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 7.4 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-14593",
"url": "https://www.suse.com/security/cve/CVE-2020-14593"
},
{
"category": "external",
"summary": "SUSE Bug 1174157 for CVE-2020-14593",
"url": "https://bugzilla.suse.com/1174157"
},
{
"category": "external",
"summary": "SUSE Bug 1175259 for CVE-2020-14593",
"url": "https://bugzilla.suse.com/1175259"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.4,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-14593"
},
{
"cve": "CVE-2020-14621",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-14621"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JAXP). Supported versions that are affected are Java SE: 7u261, 8u251, 11.0.7 and 14.0.1; Java SE Embedded: 8u251. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 5.3 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-14621",
"url": "https://www.suse.com/security/cve/CVE-2020-14621"
},
{
"category": "external",
"summary": "SUSE Bug 1174157 for CVE-2020-14621",
"url": "https://bugzilla.suse.com/1174157"
},
{
"category": "external",
"summary": "SUSE Bug 1175259 for CVE-2020-14621",
"url": "https://bugzilla.suse.com/1175259"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-14621"
},
{
"cve": "CVE-2020-14779",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-14779"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Serialization). Supported versions that are affected are Java SE: 7u271, 8u261, 11.0.8 and 15; Java SE Embedded: 8u261. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.1 Base Score 3.7 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-14779",
"url": "https://www.suse.com/security/cve/CVE-2020-14779"
},
{
"category": "external",
"summary": "SUSE Bug 1177943 for CVE-2020-14779",
"url": "https://bugzilla.suse.com/1177943"
},
{
"category": "external",
"summary": "SUSE Bug 1180063 for CVE-2020-14779",
"url": "https://bugzilla.suse.com/1180063"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2020-14779"
},
{
"cve": "CVE-2020-14781",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-14781"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JNDI). Supported versions that are affected are Java SE: 7u271, 8u261, 11.0.8 and 15; Java SE Embedded: 8u261. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.1 Base Score 3.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-14781",
"url": "https://www.suse.com/security/cve/CVE-2020-14781"
},
{
"category": "external",
"summary": "SUSE Bug 1177943 for CVE-2020-14781",
"url": "https://bugzilla.suse.com/1177943"
},
{
"category": "external",
"summary": "SUSE Bug 1180063 for CVE-2020-14781",
"url": "https://bugzilla.suse.com/1180063"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2020-14781"
},
{
"cve": "CVE-2020-14782",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-14782"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u271, 8u261, 11.0.8 and 15; Java SE Embedded: 8u261. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded accessible data. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.1 Base Score 3.7 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-14782",
"url": "https://www.suse.com/security/cve/CVE-2020-14782"
},
{
"category": "external",
"summary": "SUSE Bug 1177943 for CVE-2020-14782",
"url": "https://bugzilla.suse.com/1177943"
},
{
"category": "external",
"summary": "SUSE Bug 1180063 for CVE-2020-14782",
"url": "https://bugzilla.suse.com/1180063"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2020-14782"
},
{
"cve": "CVE-2020-14792",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-14792"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Hotspot). Supported versions that are affected are Java SE: 7u271, 8u261, 11.0.8 and 15; Java SE Embedded: 8u261. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded accessible data as well as unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.1 Base Score 4.2 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-14792",
"url": "https://www.suse.com/security/cve/CVE-2020-14792"
},
{
"category": "external",
"summary": "SUSE Bug 1177943 for CVE-2020-14792",
"url": "https://bugzilla.suse.com/1177943"
},
{
"category": "external",
"summary": "SUSE Bug 1180063 for CVE-2020-14792",
"url": "https://bugzilla.suse.com/1180063"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.2,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2020-14792"
},
{
"cve": "CVE-2020-14796",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-14796"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u271, 8u261, 11.0.8 and 15; Java SE Embedded: 8u261. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 3.1 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-14796",
"url": "https://www.suse.com/security/cve/CVE-2020-14796"
},
{
"category": "external",
"summary": "SUSE Bug 1177943 for CVE-2020-14796",
"url": "https://bugzilla.suse.com/1177943"
},
{
"category": "external",
"summary": "SUSE Bug 1180063 for CVE-2020-14796",
"url": "https://bugzilla.suse.com/1180063"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.1,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2020-14796"
},
{
"cve": "CVE-2020-14797",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-14797"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u271, 8u261, 11.0.8 and 15; Java SE Embedded: 8u261. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded accessible data. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.1 Base Score 3.7 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-14797",
"url": "https://www.suse.com/security/cve/CVE-2020-14797"
},
{
"category": "external",
"summary": "SUSE Bug 1177943 for CVE-2020-14797",
"url": "https://bugzilla.suse.com/1177943"
},
{
"category": "external",
"summary": "SUSE Bug 1180063 for CVE-2020-14797",
"url": "https://bugzilla.suse.com/1180063"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2020-14797"
},
{
"cve": "CVE-2020-14798",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-14798"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u271, 8u261, 11.0.8 and 15; Java SE Embedded: 8u261. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 3.1 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-14798",
"url": "https://www.suse.com/security/cve/CVE-2020-14798"
},
{
"category": "external",
"summary": "SUSE Bug 1177943 for CVE-2020-14798",
"url": "https://bugzilla.suse.com/1177943"
},
{
"category": "external",
"summary": "SUSE Bug 1180063 for CVE-2020-14798",
"url": "https://bugzilla.suse.com/1180063"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2020-14798"
},
{
"cve": "CVE-2020-14803",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-14803"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 11.0.8 and 15. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-14803",
"url": "https://www.suse.com/security/cve/CVE-2020-14803"
},
{
"category": "external",
"summary": "SUSE Bug 1177943 for CVE-2020-14803",
"url": "https://bugzilla.suse.com/1177943"
},
{
"category": "external",
"summary": "SUSE Bug 1181239 for CVE-2020-14803",
"url": "https://bugzilla.suse.com/1181239"
},
{
"category": "external",
"summary": "SUSE Bug 1182186 for CVE-2020-14803",
"url": "https://bugzilla.suse.com/1182186"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2020-14803"
},
{
"cve": "CVE-2021-2161",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-2161"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u291, 8u281, 11.0.10, 16; Java SE Embedded: 8u281; Oracle GraalVM Enterprise Edition: 19.3.5, 20.3.1.2 and 21.0.0.2. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Java SE, Java SE Embedded, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. It can also be exploited by supplying untrusted data to APIs in the specified Component. CVSS 3.1 Base Score 5.9 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-2161",
"url": "https://www.suse.com/security/cve/CVE-2021-2161"
},
{
"category": "external",
"summary": "SUSE Bug 1185056 for CVE-2021-2161",
"url": "https://bugzilla.suse.com/1185056"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-2161"
},
{
"cve": "CVE-2021-2163",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-2163"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u291, 8u281, 11.0.10, 16; Java SE Embedded: 8u281; Oracle GraalVM Enterprise Edition: 19.3.5, 20.3.1.2 and 21.0.0.2. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, Oracle GraalVM Enterprise Edition. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Java SE, Java SE Embedded, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 5.3 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-2163",
"url": "https://www.suse.com/security/cve/CVE-2021-2163"
},
{
"category": "external",
"summary": "SUSE Bug 1185055 for CVE-2021-2163",
"url": "https://bugzilla.suse.com/1185055"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-2163"
},
{
"cve": "CVE-2021-2341",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-2341"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking). Supported versions that are affected are Java SE: 7u301, 8u291, 11.0.11, 16.0.1; Oracle GraalVM Enterprise Edition: 20.3.2 and 21.1.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Oracle GraalVM Enterprise Edition. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 3.1 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-2341",
"url": "https://www.suse.com/security/cve/CVE-2021-2341"
},
{
"category": "external",
"summary": "SUSE Bug 1188564 for CVE-2021-2341",
"url": "https://bugzilla.suse.com/1188564"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.1,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-2341"
},
{
"cve": "CVE-2021-2369",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-2369"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Library). Supported versions that are affected are Java SE: 7u301, 8u291, 11.0.11, 16.0.1; Oracle GraalVM Enterprise Edition: 20.3.2 and 21.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Oracle GraalVM Enterprise Edition. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 4.3 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-2369",
"url": "https://www.suse.com/security/cve/CVE-2021-2369"
},
{
"category": "external",
"summary": "SUSE Bug 1188565 for CVE-2021-2369",
"url": "https://bugzilla.suse.com/1188565"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-2369"
},
{
"cve": "CVE-2021-2388",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-2388"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot). Supported versions that are affected are Java SE: 8u291, 11.0.11, 16.0.1; Oracle GraalVM Enterprise Edition: 20.3.2 and 21.1.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Oracle GraalVM Enterprise Edition. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of Java SE, Oracle GraalVM Enterprise Edition. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 7.5 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-2388",
"url": "https://www.suse.com/security/cve/CVE-2021-2388"
},
{
"category": "external",
"summary": "SUSE Bug 1188566 for CVE-2021-2388",
"url": "https://bugzilla.suse.com/1188566"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-accessibility-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-demo-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-devel-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-headless-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-javadoc-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-jmods-15.0.4.0-2.1.x86_64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.aarch64",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.ppc64le",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.s390x",
"openSUSE Tumbleweed:java-15-openjdk-src-15.0.4.0-2.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-2388"
}
]
}
opensuse-su-2024:10871-1
Vulnerability from csaf_opensuse
Published
2024-06-15 00:00
Modified
2024-06-15 00:00
Summary
java-11-openjdk-11.0.12.0-3.1 on GA media
Notes
Title of the patch
java-11-openjdk-11.0.12.0-3.1 on GA media
Description of the patch
These are all security issues fixed in the java-11-openjdk-11.0.12.0-3.1 package on the GA media of openSUSE Tumbleweed.
Patchnames
openSUSE-Tumbleweed-2024-10871
Terms of use
CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "java-11-openjdk-11.0.12.0-3.1 on GA media",
"title": "Title of the patch"
},
{
"category": "description",
"text": "These are all security issues fixed in the java-11-openjdk-11.0.12.0-3.1 package on the GA media of openSUSE Tumbleweed.",
"title": "Description of the patch"
},
{
"category": "details",
"text": "openSUSE-Tumbleweed-2024-10871",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2024_10871-1.json"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-11212 page",
"url": "https://www.suse.com/security/cve/CVE-2018-11212/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-2790 page",
"url": "https://www.suse.com/security/cve/CVE-2018-2790/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-2794 page",
"url": "https://www.suse.com/security/cve/CVE-2018-2794/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-2795 page",
"url": "https://www.suse.com/security/cve/CVE-2018-2795/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-2796 page",
"url": "https://www.suse.com/security/cve/CVE-2018-2796/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-2797 page",
"url": "https://www.suse.com/security/cve/CVE-2018-2797/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-2798 page",
"url": "https://www.suse.com/security/cve/CVE-2018-2798/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-2799 page",
"url": "https://www.suse.com/security/cve/CVE-2018-2799/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-2814 page",
"url": "https://www.suse.com/security/cve/CVE-2018-2814/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-2825 page",
"url": "https://www.suse.com/security/cve/CVE-2018-2825/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-2826 page",
"url": "https://www.suse.com/security/cve/CVE-2018-2826/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-2940 page",
"url": "https://www.suse.com/security/cve/CVE-2018-2940/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-2952 page",
"url": "https://www.suse.com/security/cve/CVE-2018-2952/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-2972 page",
"url": "https://www.suse.com/security/cve/CVE-2018-2972/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-2973 page",
"url": "https://www.suse.com/security/cve/CVE-2018-2973/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-3136 page",
"url": "https://www.suse.com/security/cve/CVE-2018-3136/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-3139 page",
"url": "https://www.suse.com/security/cve/CVE-2018-3139/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-3149 page",
"url": "https://www.suse.com/security/cve/CVE-2018-3149/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-3150 page",
"url": "https://www.suse.com/security/cve/CVE-2018-3150/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-3157 page",
"url": "https://www.suse.com/security/cve/CVE-2018-3157/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-3169 page",
"url": "https://www.suse.com/security/cve/CVE-2018-3169/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-3180 page",
"url": "https://www.suse.com/security/cve/CVE-2018-3180/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-3183 page",
"url": "https://www.suse.com/security/cve/CVE-2018-3183/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-2422 page",
"url": "https://www.suse.com/security/cve/CVE-2019-2422/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-2426 page",
"url": "https://www.suse.com/security/cve/CVE-2019-2426/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-2602 page",
"url": "https://www.suse.com/security/cve/CVE-2019-2602/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-2684 page",
"url": "https://www.suse.com/security/cve/CVE-2019-2684/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-2745 page",
"url": "https://www.suse.com/security/cve/CVE-2019-2745/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-2762 page",
"url": "https://www.suse.com/security/cve/CVE-2019-2762/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-2766 page",
"url": "https://www.suse.com/security/cve/CVE-2019-2766/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-2769 page",
"url": "https://www.suse.com/security/cve/CVE-2019-2769/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-2786 page",
"url": "https://www.suse.com/security/cve/CVE-2019-2786/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-2816 page",
"url": "https://www.suse.com/security/cve/CVE-2019-2816/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-2818 page",
"url": "https://www.suse.com/security/cve/CVE-2019-2818/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-2821 page",
"url": "https://www.suse.com/security/cve/CVE-2019-2821/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-2894 page",
"url": "https://www.suse.com/security/cve/CVE-2019-2894/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-2933 page",
"url": "https://www.suse.com/security/cve/CVE-2019-2933/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-2945 page",
"url": "https://www.suse.com/security/cve/CVE-2019-2945/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-2949 page",
"url": "https://www.suse.com/security/cve/CVE-2019-2949/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-2958 page",
"url": "https://www.suse.com/security/cve/CVE-2019-2958/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-2962 page",
"url": "https://www.suse.com/security/cve/CVE-2019-2962/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-2964 page",
"url": "https://www.suse.com/security/cve/CVE-2019-2964/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-2973 page",
"url": "https://www.suse.com/security/cve/CVE-2019-2973/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-2975 page",
"url": "https://www.suse.com/security/cve/CVE-2019-2975/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-2977 page",
"url": "https://www.suse.com/security/cve/CVE-2019-2977/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-2978 page",
"url": "https://www.suse.com/security/cve/CVE-2019-2978/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-2981 page",
"url": "https://www.suse.com/security/cve/CVE-2019-2981/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-2983 page",
"url": "https://www.suse.com/security/cve/CVE-2019-2983/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-2987 page",
"url": "https://www.suse.com/security/cve/CVE-2019-2987/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-2988 page",
"url": "https://www.suse.com/security/cve/CVE-2019-2988/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-2989 page",
"url": "https://www.suse.com/security/cve/CVE-2019-2989/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-2992 page",
"url": "https://www.suse.com/security/cve/CVE-2019-2992/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-2999 page",
"url": "https://www.suse.com/security/cve/CVE-2019-2999/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-7317 page",
"url": "https://www.suse.com/security/cve/CVE-2019-7317/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-14556 page",
"url": "https://www.suse.com/security/cve/CVE-2020-14556/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-14562 page",
"url": "https://www.suse.com/security/cve/CVE-2020-14562/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-14573 page",
"url": "https://www.suse.com/security/cve/CVE-2020-14573/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-14577 page",
"url": "https://www.suse.com/security/cve/CVE-2020-14577/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-14581 page",
"url": "https://www.suse.com/security/cve/CVE-2020-14581/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-14583 page",
"url": "https://www.suse.com/security/cve/CVE-2020-14583/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-14593 page",
"url": "https://www.suse.com/security/cve/CVE-2020-14593/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-14621 page",
"url": "https://www.suse.com/security/cve/CVE-2020-14621/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-14779 page",
"url": "https://www.suse.com/security/cve/CVE-2020-14779/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-14781 page",
"url": "https://www.suse.com/security/cve/CVE-2020-14781/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-14782 page",
"url": "https://www.suse.com/security/cve/CVE-2020-14782/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-14792 page",
"url": "https://www.suse.com/security/cve/CVE-2020-14792/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-14796 page",
"url": "https://www.suse.com/security/cve/CVE-2020-14796/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-14797 page",
"url": "https://www.suse.com/security/cve/CVE-2020-14797/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-14798 page",
"url": "https://www.suse.com/security/cve/CVE-2020-14798/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-14803 page",
"url": "https://www.suse.com/security/cve/CVE-2020-14803/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-2583 page",
"url": "https://www.suse.com/security/cve/CVE-2020-2583/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-2590 page",
"url": "https://www.suse.com/security/cve/CVE-2020-2590/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-2593 page",
"url": "https://www.suse.com/security/cve/CVE-2020-2593/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-2601 page",
"url": "https://www.suse.com/security/cve/CVE-2020-2601/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-2604 page",
"url": "https://www.suse.com/security/cve/CVE-2020-2604/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-2654 page",
"url": "https://www.suse.com/security/cve/CVE-2020-2654/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-2655 page",
"url": "https://www.suse.com/security/cve/CVE-2020-2655/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-2754 page",
"url": "https://www.suse.com/security/cve/CVE-2020-2754/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-2755 page",
"url": "https://www.suse.com/security/cve/CVE-2020-2755/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-2756 page",
"url": "https://www.suse.com/security/cve/CVE-2020-2756/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-2757 page",
"url": "https://www.suse.com/security/cve/CVE-2020-2757/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-2767 page",
"url": "https://www.suse.com/security/cve/CVE-2020-2767/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-2773 page",
"url": "https://www.suse.com/security/cve/CVE-2020-2773/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-2778 page",
"url": "https://www.suse.com/security/cve/CVE-2020-2778/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-2781 page",
"url": "https://www.suse.com/security/cve/CVE-2020-2781/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-2800 page",
"url": "https://www.suse.com/security/cve/CVE-2020-2800/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-2803 page",
"url": "https://www.suse.com/security/cve/CVE-2020-2803/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-2805 page",
"url": "https://www.suse.com/security/cve/CVE-2020-2805/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-2816 page",
"url": "https://www.suse.com/security/cve/CVE-2020-2816/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-2830 page",
"url": "https://www.suse.com/security/cve/CVE-2020-2830/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-2161 page",
"url": "https://www.suse.com/security/cve/CVE-2021-2161/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-2163 page",
"url": "https://www.suse.com/security/cve/CVE-2021-2163/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-2341 page",
"url": "https://www.suse.com/security/cve/CVE-2021-2341/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-2369 page",
"url": "https://www.suse.com/security/cve/CVE-2021-2369/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-2388 page",
"url": "https://www.suse.com/security/cve/CVE-2021-2388/"
}
],
"title": "java-11-openjdk-11.0.12.0-3.1 on GA media",
"tracking": {
"current_release_date": "2024-06-15T00:00:00Z",
"generator": {
"date": "2024-06-15T00:00:00Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "openSUSE-SU-2024:10871-1",
"initial_release_date": "2024-06-15T00:00:00Z",
"revision_history": [
{
"date": "2024-06-15T00:00:00Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "java-11-openjdk-11.0.12.0-3.1.aarch64",
"product": {
"name": "java-11-openjdk-11.0.12.0-3.1.aarch64",
"product_id": "java-11-openjdk-11.0.12.0-3.1.aarch64"
}
},
{
"category": "product_version",
"name": "java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"product": {
"name": "java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"product_id": "java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64"
}
},
{
"category": "product_version",
"name": "java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"product": {
"name": "java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"product_id": "java-11-openjdk-demo-11.0.12.0-3.1.aarch64"
}
},
{
"category": "product_version",
"name": "java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"product": {
"name": "java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"product_id": "java-11-openjdk-devel-11.0.12.0-3.1.aarch64"
}
},
{
"category": "product_version",
"name": "java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"product": {
"name": "java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"product_id": "java-11-openjdk-headless-11.0.12.0-3.1.aarch64"
}
},
{
"category": "product_version",
"name": "java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"product": {
"name": "java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"product_id": "java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64"
}
},
{
"category": "product_version",
"name": "java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"product": {
"name": "java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"product_id": "java-11-openjdk-jmods-11.0.12.0-3.1.aarch64"
}
},
{
"category": "product_version",
"name": "java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"product": {
"name": "java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"product_id": "java-11-openjdk-src-11.0.12.0-3.1.aarch64"
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "java-11-openjdk-11.0.12.0-3.1.ppc64le",
"product": {
"name": "java-11-openjdk-11.0.12.0-3.1.ppc64le",
"product_id": "java-11-openjdk-11.0.12.0-3.1.ppc64le"
}
},
{
"category": "product_version",
"name": "java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"product": {
"name": "java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"product_id": "java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le"
}
},
{
"category": "product_version",
"name": "java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"product": {
"name": "java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"product_id": "java-11-openjdk-demo-11.0.12.0-3.1.ppc64le"
}
},
{
"category": "product_version",
"name": "java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"product": {
"name": "java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"product_id": "java-11-openjdk-devel-11.0.12.0-3.1.ppc64le"
}
},
{
"category": "product_version",
"name": "java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"product": {
"name": "java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"product_id": "java-11-openjdk-headless-11.0.12.0-3.1.ppc64le"
}
},
{
"category": "product_version",
"name": "java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"product": {
"name": "java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"product_id": "java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le"
}
},
{
"category": "product_version",
"name": "java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"product": {
"name": "java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"product_id": "java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le"
}
},
{
"category": "product_version",
"name": "java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"product": {
"name": "java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"product_id": "java-11-openjdk-src-11.0.12.0-3.1.ppc64le"
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "java-11-openjdk-11.0.12.0-3.1.s390x",
"product": {
"name": "java-11-openjdk-11.0.12.0-3.1.s390x",
"product_id": "java-11-openjdk-11.0.12.0-3.1.s390x"
}
},
{
"category": "product_version",
"name": "java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"product": {
"name": "java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"product_id": "java-11-openjdk-accessibility-11.0.12.0-3.1.s390x"
}
},
{
"category": "product_version",
"name": "java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"product": {
"name": "java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"product_id": "java-11-openjdk-demo-11.0.12.0-3.1.s390x"
}
},
{
"category": "product_version",
"name": "java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"product": {
"name": "java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"product_id": "java-11-openjdk-devel-11.0.12.0-3.1.s390x"
}
},
{
"category": "product_version",
"name": "java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"product": {
"name": "java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"product_id": "java-11-openjdk-headless-11.0.12.0-3.1.s390x"
}
},
{
"category": "product_version",
"name": "java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"product": {
"name": "java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"product_id": "java-11-openjdk-javadoc-11.0.12.0-3.1.s390x"
}
},
{
"category": "product_version",
"name": "java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"product": {
"name": "java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"product_id": "java-11-openjdk-jmods-11.0.12.0-3.1.s390x"
}
},
{
"category": "product_version",
"name": "java-11-openjdk-src-11.0.12.0-3.1.s390x",
"product": {
"name": "java-11-openjdk-src-11.0.12.0-3.1.s390x",
"product_id": "java-11-openjdk-src-11.0.12.0-3.1.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "java-11-openjdk-11.0.12.0-3.1.x86_64",
"product": {
"name": "java-11-openjdk-11.0.12.0-3.1.x86_64",
"product_id": "java-11-openjdk-11.0.12.0-3.1.x86_64"
}
},
{
"category": "product_version",
"name": "java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"product": {
"name": "java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"product_id": "java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64"
}
},
{
"category": "product_version",
"name": "java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"product": {
"name": "java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"product_id": "java-11-openjdk-demo-11.0.12.0-3.1.x86_64"
}
},
{
"category": "product_version",
"name": "java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"product": {
"name": "java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"product_id": "java-11-openjdk-devel-11.0.12.0-3.1.x86_64"
}
},
{
"category": "product_version",
"name": "java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"product": {
"name": "java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"product_id": "java-11-openjdk-headless-11.0.12.0-3.1.x86_64"
}
},
{
"category": "product_version",
"name": "java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"product": {
"name": "java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"product_id": "java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64"
}
},
{
"category": "product_version",
"name": "java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"product": {
"name": "java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"product_id": "java-11-openjdk-jmods-11.0.12.0-3.1.x86_64"
}
},
{
"category": "product_version",
"name": "java-11-openjdk-src-11.0.12.0-3.1.x86_64",
"product": {
"name": "java-11-openjdk-src-11.0.12.0-3.1.x86_64",
"product_id": "java-11-openjdk-src-11.0.12.0-3.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "openSUSE Tumbleweed",
"product": {
"name": "openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed",
"product_identification_helper": {
"cpe": "cpe:/o:opensuse:tumbleweed"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "java-11-openjdk-11.0.12.0-3.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64"
},
"product_reference": "java-11-openjdk-11.0.12.0-3.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-11-openjdk-11.0.12.0-3.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le"
},
"product_reference": "java-11-openjdk-11.0.12.0-3.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-11-openjdk-11.0.12.0-3.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x"
},
"product_reference": "java-11-openjdk-11.0.12.0-3.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-11-openjdk-11.0.12.0-3.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64"
},
"product_reference": "java-11-openjdk-11.0.12.0-3.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64"
},
"product_reference": "java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le"
},
"product_reference": "java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-11-openjdk-accessibility-11.0.12.0-3.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x"
},
"product_reference": "java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64"
},
"product_reference": "java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-11-openjdk-demo-11.0.12.0-3.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64"
},
"product_reference": "java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-11-openjdk-demo-11.0.12.0-3.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le"
},
"product_reference": "java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-11-openjdk-demo-11.0.12.0-3.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x"
},
"product_reference": "java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-11-openjdk-demo-11.0.12.0-3.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64"
},
"product_reference": "java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-11-openjdk-devel-11.0.12.0-3.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64"
},
"product_reference": "java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-11-openjdk-devel-11.0.12.0-3.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le"
},
"product_reference": "java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-11-openjdk-devel-11.0.12.0-3.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x"
},
"product_reference": "java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-11-openjdk-devel-11.0.12.0-3.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64"
},
"product_reference": "java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-11-openjdk-headless-11.0.12.0-3.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64"
},
"product_reference": "java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-11-openjdk-headless-11.0.12.0-3.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le"
},
"product_reference": "java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-11-openjdk-headless-11.0.12.0-3.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x"
},
"product_reference": "java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-11-openjdk-headless-11.0.12.0-3.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64"
},
"product_reference": "java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64"
},
"product_reference": "java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le"
},
"product_reference": "java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-11-openjdk-javadoc-11.0.12.0-3.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x"
},
"product_reference": "java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64"
},
"product_reference": "java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-11-openjdk-jmods-11.0.12.0-3.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64"
},
"product_reference": "java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le"
},
"product_reference": "java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-11-openjdk-jmods-11.0.12.0-3.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x"
},
"product_reference": "java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-11-openjdk-jmods-11.0.12.0-3.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64"
},
"product_reference": "java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-11-openjdk-src-11.0.12.0-3.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64"
},
"product_reference": "java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-11-openjdk-src-11.0.12.0-3.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le"
},
"product_reference": "java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-11-openjdk-src-11.0.12.0-3.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x"
},
"product_reference": "java-11-openjdk-src-11.0.12.0-3.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-11-openjdk-src-11.0.12.0-3.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
},
"product_reference": "java-11-openjdk-src-11.0.12.0-3.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2018-11212",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-11212"
}
],
"notes": [
{
"category": "general",
"text": "An issue was discovered in libjpeg 9a and 9d. The alloc_sarray function in jmemmgr.c allows remote attackers to cause a denial of service (divide-by-zero error) via a crafted file.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-11212",
"url": "https://www.suse.com/security/cve/CVE-2018-11212"
},
{
"category": "external",
"summary": "SUSE Bug 1122299 for CVE-2018-11212",
"url": "https://bugzilla.suse.com/1122299"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2018-11212"
},
{
"cve": "CVE-2018-2790",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-2790"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u181, 7u171, 8u162 and 10; Java SE Embedded: 8u161. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 3.1 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-2790",
"url": "https://www.suse.com/security/cve/CVE-2018-2790"
},
{
"category": "external",
"summary": "SUSE Bug 1090023 for CVE-2018-2790",
"url": "https://bugzilla.suse.com/1090023"
},
{
"category": "external",
"summary": "SUSE Bug 1093311 for CVE-2018-2790",
"url": "https://bugzilla.suse.com/1093311"
},
{
"category": "external",
"summary": "SUSE Bug 1101637 for CVE-2018-2790",
"url": "https://bugzilla.suse.com/1101637"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.1,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2018-2790"
},
{
"cve": "CVE-2018-2794",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-2794"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, JRockit component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u181, 7u171, 8u162, 10 and JRockit: R28.3.17. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Java SE, JRockit executes to compromise Java SE, JRockit. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, JRockit, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 7.7 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-2794",
"url": "https://www.suse.com/security/cve/CVE-2018-2794"
},
{
"category": "external",
"summary": "SUSE Bug 1090024 for CVE-2018-2794",
"url": "https://bugzilla.suse.com/1090024"
},
{
"category": "external",
"summary": "SUSE Bug 1093311 for CVE-2018-2794",
"url": "https://bugzilla.suse.com/1093311"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-2794"
},
{
"cve": "CVE-2018-2795",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-2795"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u181, 7u171, 8u162 and 10; Java SE Embedded: 8u161; JRockit: R28.3.17. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-2795",
"url": "https://www.suse.com/security/cve/CVE-2018-2795"
},
{
"category": "external",
"summary": "SUSE Bug 1090025 for CVE-2018-2795",
"url": "https://bugzilla.suse.com/1090025"
},
{
"category": "external",
"summary": "SUSE Bug 1093311 for CVE-2018-2795",
"url": "https://bugzilla.suse.com/1093311"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-2795"
},
{
"cve": "CVE-2018-2796",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-2796"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Concurrency). Supported versions that are affected are Java SE: 7u171, 8u162 and 10; Java SE Embedded: 8u161; JRockit: R28.3.17. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-2796",
"url": "https://www.suse.com/security/cve/CVE-2018-2796"
},
{
"category": "external",
"summary": "SUSE Bug 1090026 for CVE-2018-2796",
"url": "https://bugzilla.suse.com/1090026"
},
{
"category": "external",
"summary": "SUSE Bug 1093311 for CVE-2018-2796",
"url": "https://bugzilla.suse.com/1093311"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-2796"
},
{
"cve": "CVE-2018-2797",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-2797"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JMX). Supported versions that are affected are Java SE: 6u181, 7u171, 8u162 and 10; Java SE Embedded: 8u161; JRockit: R28.3.17. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-2797",
"url": "https://www.suse.com/security/cve/CVE-2018-2797"
},
{
"category": "external",
"summary": "SUSE Bug 1090027 for CVE-2018-2797",
"url": "https://bugzilla.suse.com/1090027"
},
{
"category": "external",
"summary": "SUSE Bug 1093311 for CVE-2018-2797",
"url": "https://bugzilla.suse.com/1093311"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-2797"
},
{
"cve": "CVE-2018-2798",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-2798"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: AWT). Supported versions that are affected are Java SE: 6u181, 7u171, 8u162 and 10; Java SE Embedded: 8u161; JRockit: R28.3.17. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-2798",
"url": "https://www.suse.com/security/cve/CVE-2018-2798"
},
{
"category": "external",
"summary": "SUSE Bug 1090028 for CVE-2018-2798",
"url": "https://bugzilla.suse.com/1090028"
},
{
"category": "external",
"summary": "SUSE Bug 1093311 for CVE-2018-2798",
"url": "https://bugzilla.suse.com/1093311"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-2798"
},
{
"cve": "CVE-2018-2799",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-2799"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JAXP). Supported versions that are affected are Java SE: 7u171, 8u162 and 10; Java SE Embedded: 8u161; JRockit: R28.3.17. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-2799",
"url": "https://www.suse.com/security/cve/CVE-2018-2799"
},
{
"category": "external",
"summary": "SUSE Bug 1090029 for CVE-2018-2799",
"url": "https://bugzilla.suse.com/1090029"
},
{
"category": "external",
"summary": "SUSE Bug 1093311 for CVE-2018-2799",
"url": "https://bugzilla.suse.com/1093311"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-2799"
},
{
"cve": "CVE-2018-2814",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-2814"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Hotspot). Supported versions that are affected are Java SE: 6u181, 7u171, 8u162 and 10; Java SE Embedded: 8u161. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, Java SE Embedded, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 8.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-2814",
"url": "https://www.suse.com/security/cve/CVE-2018-2814"
},
{
"category": "external",
"summary": "SUSE Bug 1090032 for CVE-2018-2814",
"url": "https://bugzilla.suse.com/1090032"
},
{
"category": "external",
"summary": "SUSE Bug 1093311 for CVE-2018-2814",
"url": "https://bugzilla.suse.com/1093311"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-2814"
},
{
"cve": "CVE-2018-2825",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-2825"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Libraries). The supported version that is affected is Java SE: 10. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 8.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-2825",
"url": "https://www.suse.com/security/cve/CVE-2018-2825"
},
{
"category": "external",
"summary": "SUSE Bug 1090196 for CVE-2018-2825",
"url": "https://bugzilla.suse.com/1090196"
},
{
"category": "external",
"summary": "SUSE Bug 1093311 for CVE-2018-2825",
"url": "https://bugzilla.suse.com/1093311"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.3,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-2825"
},
{
"cve": "CVE-2018-2826",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-2826"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Libraries). The supported version that is affected is Java SE: 10. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 8.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-2826",
"url": "https://www.suse.com/security/cve/CVE-2018-2826"
},
{
"category": "external",
"summary": "SUSE Bug 1090197 for CVE-2018-2826",
"url": "https://bugzilla.suse.com/1090197"
},
{
"category": "external",
"summary": "SUSE Bug 1093311 for CVE-2018-2826",
"url": "https://bugzilla.suse.com/1093311"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.3,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-2826"
},
{
"cve": "CVE-2018-2940",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-2940"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries). Supported versions that are affected are Java SE: 6u191, 7u181, 8u172 and 10.0.1; Java SE Embedded: 8u171. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 4.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-2940",
"url": "https://www.suse.com/security/cve/CVE-2018-2940"
},
{
"category": "external",
"summary": "SUSE Bug 1101645 for CVE-2018-2940",
"url": "https://bugzilla.suse.com/1101645"
},
{
"category": "external",
"summary": "SUSE Bug 1101656 for CVE-2018-2940",
"url": "https://bugzilla.suse.com/1101656"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-2940"
},
{
"cve": "CVE-2018-2952",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-2952"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Concurrency). Supported versions that are affected are Java SE: 6u191, 7u181, 8u172 and 10.0.1; Java SE Embedded: 8u171; JRockit: R28.3.18. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 3.7 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-2952",
"url": "https://www.suse.com/security/cve/CVE-2018-2952"
},
{
"category": "external",
"summary": "SUSE Bug 1101645 for CVE-2018-2952",
"url": "https://bugzilla.suse.com/1101645"
},
{
"category": "external",
"summary": "SUSE Bug 1101651 for CVE-2018-2952",
"url": "https://bugzilla.suse.com/1101651"
},
{
"category": "external",
"summary": "SUSE Bug 1101656 for CVE-2018-2952",
"url": "https://bugzilla.suse.com/1101656"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-2952"
},
{
"cve": "CVE-2018-2972",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-2972"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Security). The supported version that is affected is Java SE: 10.0.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Java SE accessible data. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 5.9 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-2972",
"url": "https://www.suse.com/security/cve/CVE-2018-2972"
},
{
"category": "external",
"summary": "SUSE Bug 1101655 for CVE-2018-2972",
"url": "https://bugzilla.suse.com/1101655"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-2972"
},
{
"cve": "CVE-2018-2973",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-2973"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: JSSE). Supported versions that are affected are Java SE: 6u191, 7u181, 8u172 and 10.0.1; Java SE Embedded: 8u171. Difficult to exploit vulnerability allows unauthenticated attacker with network access via SSL/TLS to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 5.9 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-2973",
"url": "https://www.suse.com/security/cve/CVE-2018-2973"
},
{
"category": "external",
"summary": "SUSE Bug 1101645 for CVE-2018-2973",
"url": "https://bugzilla.suse.com/1101645"
},
{
"category": "external",
"summary": "SUSE Bug 1101656 for CVE-2018-2973",
"url": "https://bugzilla.suse.com/1101656"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-2973"
},
{
"cve": "CVE-2018-3136",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-3136"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u201, 7u191, 8u182 and 11; Java SE Embedded: 8u181. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, Java SE Embedded, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g. code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g. code installed by an administrator). CVSS 3.0 Base Score 3.4 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:L/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-3136",
"url": "https://www.suse.com/security/cve/CVE-2018-3136"
},
{
"category": "external",
"summary": "SUSE Bug 1112142 for CVE-2018-3136",
"url": "https://bugzilla.suse.com/1112142"
},
{
"category": "external",
"summary": "SUSE Bug 1112143 for CVE-2018-3136",
"url": "https://bugzilla.suse.com/1112143"
},
{
"category": "external",
"summary": "SUSE Bug 1112144 for CVE-2018-3136",
"url": "https://bugzilla.suse.com/1112144"
},
{
"category": "external",
"summary": "SUSE Bug 1112146 for CVE-2018-3136",
"url": "https://bugzilla.suse.com/1112146"
},
{
"category": "external",
"summary": "SUSE Bug 1112148 for CVE-2018-3136",
"url": "https://bugzilla.suse.com/1112148"
},
{
"category": "external",
"summary": "SUSE Bug 1112152 for CVE-2018-3136",
"url": "https://bugzilla.suse.com/1112152"
},
{
"category": "external",
"summary": "SUSE Bug 1116574 for CVE-2018-3136",
"url": "https://bugzilla.suse.com/1116574"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.1,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-3136"
},
{
"cve": "CVE-2018-3139",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-3139"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Networking). Supported versions that are affected are Java SE: 6u201, 7u191, 8u182 and 11; Java SE Embedded: 8u181. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g. code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g. code installed by an administrator). CVSS 3.0 Base Score 3.1 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-3139",
"url": "https://www.suse.com/security/cve/CVE-2018-3139"
},
{
"category": "external",
"summary": "SUSE Bug 1112142 for CVE-2018-3139",
"url": "https://bugzilla.suse.com/1112142"
},
{
"category": "external",
"summary": "SUSE Bug 1112143 for CVE-2018-3139",
"url": "https://bugzilla.suse.com/1112143"
},
{
"category": "external",
"summary": "SUSE Bug 1112144 for CVE-2018-3139",
"url": "https://bugzilla.suse.com/1112144"
},
{
"category": "external",
"summary": "SUSE Bug 1112146 for CVE-2018-3139",
"url": "https://bugzilla.suse.com/1112146"
},
{
"category": "external",
"summary": "SUSE Bug 1112148 for CVE-2018-3139",
"url": "https://bugzilla.suse.com/1112148"
},
{
"category": "external",
"summary": "SUSE Bug 1112152 for CVE-2018-3139",
"url": "https://bugzilla.suse.com/1112152"
},
{
"category": "external",
"summary": "SUSE Bug 1116574 for CVE-2018-3139",
"url": "https://bugzilla.suse.com/1116574"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.1,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-3139"
},
{
"cve": "CVE-2018-3149",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-3149"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JNDI). Supported versions that are affected are Java SE: 6u201, 7u191, 8u182 and 11; Java SE Embedded: 8u181; JRockit: R28.3.19. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, Java SE Embedded, JRockit, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE, Java SE Embedded, JRockit. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g. code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g. through a web service which supplies data to the APIs. CVSS 3.0 Base Score 8.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-3149",
"url": "https://www.suse.com/security/cve/CVE-2018-3149"
},
{
"category": "external",
"summary": "SUSE Bug 1112142 for CVE-2018-3149",
"url": "https://bugzilla.suse.com/1112142"
},
{
"category": "external",
"summary": "SUSE Bug 1112143 for CVE-2018-3149",
"url": "https://bugzilla.suse.com/1112143"
},
{
"category": "external",
"summary": "SUSE Bug 1112144 for CVE-2018-3149",
"url": "https://bugzilla.suse.com/1112144"
},
{
"category": "external",
"summary": "SUSE Bug 1112146 for CVE-2018-3149",
"url": "https://bugzilla.suse.com/1112146"
},
{
"category": "external",
"summary": "SUSE Bug 1112148 for CVE-2018-3149",
"url": "https://bugzilla.suse.com/1112148"
},
{
"category": "external",
"summary": "SUSE Bug 1112152 for CVE-2018-3149",
"url": "https://bugzilla.suse.com/1112152"
},
{
"category": "external",
"summary": "SUSE Bug 1116574 for CVE-2018-3149",
"url": "https://bugzilla.suse.com/1116574"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.3,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-3149"
},
{
"cve": "CVE-2018-3150",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-3150"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Utility). The supported version that is affected is Java SE: 11. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE accessible data. Note: This vulnerability applies to Java deployments that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 3.7 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-3150",
"url": "https://www.suse.com/security/cve/CVE-2018-3150"
},
{
"category": "external",
"summary": "SUSE Bug 1112145 for CVE-2018-3150",
"url": "https://bugzilla.suse.com/1112145"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-3150"
},
{
"cve": "CVE-2018-3157",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-3157"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Sound). The supported version that is affected is Java SE: 11. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE accessible data. Note: This vulnerability applies to Java deployments that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 3.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-3157",
"url": "https://www.suse.com/security/cve/CVE-2018-3157"
},
{
"category": "external",
"summary": "SUSE Bug 1112149 for CVE-2018-3157",
"url": "https://bugzilla.suse.com/1112149"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-3157"
},
{
"cve": "CVE-2018-3169",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-3169"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Hotspot). Supported versions that are affected are Java SE: 7u191, 8u182 and 11; Java SE Embedded: 8u181. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, Java SE Embedded, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g. code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g. code installed by an administrator). CVSS 3.0 Base Score 8.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-3169",
"url": "https://www.suse.com/security/cve/CVE-2018-3169"
},
{
"category": "external",
"summary": "SUSE Bug 1112142 for CVE-2018-3169",
"url": "https://bugzilla.suse.com/1112142"
},
{
"category": "external",
"summary": "SUSE Bug 1112143 for CVE-2018-3169",
"url": "https://bugzilla.suse.com/1112143"
},
{
"category": "external",
"summary": "SUSE Bug 1112144 for CVE-2018-3169",
"url": "https://bugzilla.suse.com/1112144"
},
{
"category": "external",
"summary": "SUSE Bug 1112146 for CVE-2018-3169",
"url": "https://bugzilla.suse.com/1112146"
},
{
"category": "external",
"summary": "SUSE Bug 1112148 for CVE-2018-3169",
"url": "https://bugzilla.suse.com/1112148"
},
{
"category": "external",
"summary": "SUSE Bug 1112152 for CVE-2018-3169",
"url": "https://bugzilla.suse.com/1112152"
},
{
"category": "external",
"summary": "SUSE Bug 1116574 for CVE-2018-3169",
"url": "https://bugzilla.suse.com/1116574"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.3,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-3169"
},
{
"cve": "CVE-2018-3180",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-3180"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JSSE). Supported versions that are affected are Java SE: 6u201, 7u191, 8u182 and 11; Java SE Embedded: 8u181; JRockit: R28.3.19. Difficult to exploit vulnerability allows unauthenticated attacker with network access via SSL/TLS to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded, JRockit accessible data as well as unauthorized read access to a subset of Java SE, Java SE Embedded, JRockit accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g. code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g. through a web service which supplies data to the APIs. CVSS 3.0 Base Score 5.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-3180",
"url": "https://www.suse.com/security/cve/CVE-2018-3180"
},
{
"category": "external",
"summary": "SUSE Bug 1112142 for CVE-2018-3180",
"url": "https://bugzilla.suse.com/1112142"
},
{
"category": "external",
"summary": "SUSE Bug 1112143 for CVE-2018-3180",
"url": "https://bugzilla.suse.com/1112143"
},
{
"category": "external",
"summary": "SUSE Bug 1112144 for CVE-2018-3180",
"url": "https://bugzilla.suse.com/1112144"
},
{
"category": "external",
"summary": "SUSE Bug 1112146 for CVE-2018-3180",
"url": "https://bugzilla.suse.com/1112146"
},
{
"category": "external",
"summary": "SUSE Bug 1112147 for CVE-2018-3180",
"url": "https://bugzilla.suse.com/1112147"
},
{
"category": "external",
"summary": "SUSE Bug 1112148 for CVE-2018-3180",
"url": "https://bugzilla.suse.com/1112148"
},
{
"category": "external",
"summary": "SUSE Bug 1112152 for CVE-2018-3180",
"url": "https://bugzilla.suse.com/1112152"
},
{
"category": "external",
"summary": "SUSE Bug 1116574 for CVE-2018-3180",
"url": "https://bugzilla.suse.com/1116574"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.6,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-3180"
},
{
"cve": "CVE-2018-3183",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-3183"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Scripting). Supported versions that are affected are Java SE: 8u182 and 11; Java SE Embedded: 8u181; JRockit: R28.3.19. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. While the vulnerability is in Java SE, Java SE Embedded, JRockit, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE, Java SE Embedded, JRockit. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g. code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g. through a web service which supplies data to the APIs. CVSS 3.0 Base Score 9.0 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-3183",
"url": "https://www.suse.com/security/cve/CVE-2018-3183"
},
{
"category": "external",
"summary": "SUSE Bug 1112142 for CVE-2018-3183",
"url": "https://bugzilla.suse.com/1112142"
},
{
"category": "external",
"summary": "SUSE Bug 1112143 for CVE-2018-3183",
"url": "https://bugzilla.suse.com/1112143"
},
{
"category": "external",
"summary": "SUSE Bug 1112144 for CVE-2018-3183",
"url": "https://bugzilla.suse.com/1112144"
},
{
"category": "external",
"summary": "SUSE Bug 1112146 for CVE-2018-3183",
"url": "https://bugzilla.suse.com/1112146"
},
{
"category": "external",
"summary": "SUSE Bug 1112148 for CVE-2018-3183",
"url": "https://bugzilla.suse.com/1112148"
},
{
"category": "external",
"summary": "SUSE Bug 1112152 for CVE-2018-3183",
"url": "https://bugzilla.suse.com/1112152"
},
{
"category": "external",
"summary": "SUSE Bug 1116574 for CVE-2018-3183",
"url": "https://bugzilla.suse.com/1116574"
},
{
"category": "external",
"summary": "SUSE Bug 1120714 for CVE-2018-3183",
"url": "https://bugzilla.suse.com/1120714"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2018-3183"
},
{
"cve": "CVE-2019-2422",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-2422"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Libraries). Supported versions that are affected are Java SE: 7u201, 8u192 and 11.0.1; Java SE Embedded: 8u191. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 3.1 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-2422",
"url": "https://www.suse.com/security/cve/CVE-2019-2422"
},
{
"category": "external",
"summary": "SUSE Bug 1122293 for CVE-2019-2422",
"url": "https://bugzilla.suse.com/1122293"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.1,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-2422"
},
{
"cve": "CVE-2019-2426",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-2426"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Networking). Supported versions that are affected are Java SE: 7u201, 8u192 and 11.0.1; Java SE Embedded: 8u191. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 3.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-2426",
"url": "https://www.suse.com/security/cve/CVE-2019-2426"
},
{
"category": "external",
"summary": "SUSE Bug 1134297 for CVE-2019-2426",
"url": "https://bugzilla.suse.com/1134297"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-2426"
},
{
"cve": "CVE-2019-2602",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-2602"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries). Supported versions that are affected are Java SE: 7u211, 8u202, 11.0.2 and 12; Java SE Embedded: 8u201. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Java SE, Java SE Embedded. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.0 Base Score 7.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-2602",
"url": "https://www.suse.com/security/cve/CVE-2019-2602"
},
{
"category": "external",
"summary": "SUSE Bug 1132728 for CVE-2019-2602",
"url": "https://bugzilla.suse.com/1132728"
},
{
"category": "external",
"summary": "SUSE Bug 1134718 for CVE-2019-2602",
"url": "https://bugzilla.suse.com/1134718"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-2602"
},
{
"cve": "CVE-2019-2684",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-2684"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: RMI). Supported versions that are affected are Java SE: 7u211, 8u202, 11.0.2 and 12; Java SE Embedded: 8u201. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 5.9 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-2684",
"url": "https://www.suse.com/security/cve/CVE-2019-2684"
},
{
"category": "external",
"summary": "SUSE Bug 1132732 for CVE-2019-2684",
"url": "https://bugzilla.suse.com/1132732"
},
{
"category": "external",
"summary": "SUSE Bug 1134718 for CVE-2019-2684",
"url": "https://bugzilla.suse.com/1134718"
},
{
"category": "external",
"summary": "SUSE Bug 1184734 for CVE-2019-2684",
"url": "https://bugzilla.suse.com/1184734"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-2684"
},
{
"cve": "CVE-2019-2745",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-2745"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 7u221, 8u212 and 11.0.3. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Java SE executes to compromise Java SE. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Java SE accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 5.1 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-2745",
"url": "https://www.suse.com/security/cve/CVE-2019-2745"
},
{
"category": "external",
"summary": "SUSE Bug 1141784 for CVE-2019-2745",
"url": "https://bugzilla.suse.com/1141784"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-2745"
},
{
"cve": "CVE-2019-2762",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-2762"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Utilities). Supported versions that are affected are Java SE: 7u221, 8u212, 11.0.3 and 12.0.1; Java SE Embedded: 8u211. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-2762",
"url": "https://www.suse.com/security/cve/CVE-2019-2762"
},
{
"category": "external",
"summary": "SUSE Bug 1141782 for CVE-2019-2762",
"url": "https://bugzilla.suse.com/1141782"
},
{
"category": "external",
"summary": "SUSE Bug 1147021 for CVE-2019-2762",
"url": "https://bugzilla.suse.com/1147021"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-2762"
},
{
"cve": "CVE-2019-2766",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-2766"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Networking). Supported versions that are affected are Java SE: 7u221, 8u212, 11.0.3 and 12.0.1; Java SE Embedded: 8u211. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 3.1 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-2766",
"url": "https://www.suse.com/security/cve/CVE-2019-2766"
},
{
"category": "external",
"summary": "SUSE Bug 1141789 for CVE-2019-2766",
"url": "https://bugzilla.suse.com/1141789"
},
{
"category": "external",
"summary": "SUSE Bug 1147021 for CVE-2019-2766",
"url": "https://bugzilla.suse.com/1147021"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.1,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-2766"
},
{
"cve": "CVE-2019-2769",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-2769"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Utilities). Supported versions that are affected are Java SE: 7u221, 8u212, 11.0.3 and 12.0.1; Java SE Embedded: 8u211. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-2769",
"url": "https://www.suse.com/security/cve/CVE-2019-2769"
},
{
"category": "external",
"summary": "SUSE Bug 1141783 for CVE-2019-2769",
"url": "https://bugzilla.suse.com/1141783"
},
{
"category": "external",
"summary": "SUSE Bug 1147021 for CVE-2019-2769",
"url": "https://bugzilla.suse.com/1147021"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-2769"
},
{
"cve": "CVE-2019-2786",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-2786"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 8u212, 11.0.3 and 12.0.1; Java SE Embedded: 8u211. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, Java SE Embedded, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 3.4 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-2786",
"url": "https://www.suse.com/security/cve/CVE-2019-2786"
},
{
"category": "external",
"summary": "SUSE Bug 1141787 for CVE-2019-2786",
"url": "https://bugzilla.suse.com/1141787"
},
{
"category": "external",
"summary": "SUSE Bug 1147021 for CVE-2019-2786",
"url": "https://bugzilla.suse.com/1147021"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.1,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-2786"
},
{
"cve": "CVE-2019-2816",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-2816"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Networking). Supported versions that are affected are Java SE: 7u221, 8u212, 11.0.3 and 12.0.1; Java SE Embedded: 8u211. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded accessible data as well as unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 4.8 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-2816",
"url": "https://www.suse.com/security/cve/CVE-2019-2816"
},
{
"category": "external",
"summary": "SUSE Bug 1141785 for CVE-2019-2816",
"url": "https://bugzilla.suse.com/1141785"
},
{
"category": "external",
"summary": "SUSE Bug 1147021 for CVE-2019-2816",
"url": "https://bugzilla.suse.com/1147021"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.8,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-2816"
},
{
"cve": "CVE-2019-2818",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-2818"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 11.0.3 and 12.0.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 3.1 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-2818",
"url": "https://www.suse.com/security/cve/CVE-2019-2818"
},
{
"category": "external",
"summary": "SUSE Bug 1141788 for CVE-2019-2818",
"url": "https://bugzilla.suse.com/1141788"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.1,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-2818"
},
{
"cve": "CVE-2019-2821",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-2821"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE component of Oracle Java SE (subcomponent: JSSE). Supported versions that are affected are Java SE: 11.0.3 and 12.0.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via TLS to compromise Java SE. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Java SE accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-2821",
"url": "https://www.suse.com/security/cve/CVE-2019-2821"
},
{
"category": "external",
"summary": "SUSE Bug 1141781 for CVE-2019-2821",
"url": "https://bugzilla.suse.com/1141781"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-2821"
},
{
"cve": "CVE-2019-2894",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-2894"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Security). Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13; Java SE Embedded: 8u221. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 3.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-2894",
"url": "https://www.suse.com/security/cve/CVE-2019-2894"
},
{
"category": "external",
"summary": "SUSE Bug 1152856 for CVE-2019-2894",
"url": "https://bugzilla.suse.com/1152856"
},
{
"category": "external",
"summary": "SUSE Bug 1154212 for CVE-2019-2894",
"url": "https://bugzilla.suse.com/1154212"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-2894"
},
{
"cve": "CVE-2019-2933",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-2933"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13; Java SE Embedded: 8u221. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 3.1 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-2933",
"url": "https://www.suse.com/security/cve/CVE-2019-2933"
},
{
"category": "external",
"summary": "SUSE Bug 1154212 for CVE-2019-2933",
"url": "https://bugzilla.suse.com/1154212"
},
{
"category": "external",
"summary": "SUSE Bug 1158442 for CVE-2019-2933",
"url": "https://bugzilla.suse.com/1158442"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.1,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-2933"
},
{
"cve": "CVE-2019-2945",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-2945"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Networking). Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13; Java SE Embedded: 8u221. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 3.1 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-2945",
"url": "https://www.suse.com/security/cve/CVE-2019-2945"
},
{
"category": "external",
"summary": "SUSE Bug 1154212 for CVE-2019-2945",
"url": "https://bugzilla.suse.com/1154212"
},
{
"category": "external",
"summary": "SUSE Bug 1158442 for CVE-2019-2945",
"url": "https://bugzilla.suse.com/1158442"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.1,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-2945"
},
{
"cve": "CVE-2019-2949",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-2949"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Kerberos). Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13; Java SE Embedded: 8u221. Difficult to exploit vulnerability allows unauthenticated attacker with network access via Kerberos to compromise Java SE, Java SE Embedded. While the vulnerability is in Java SE, Java SE Embedded, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 6.8 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-2949",
"url": "https://www.suse.com/security/cve/CVE-2019-2949"
},
{
"category": "external",
"summary": "SUSE Bug 1154212 for CVE-2019-2949",
"url": "https://bugzilla.suse.com/1154212"
},
{
"category": "external",
"summary": "SUSE Bug 1172277 for CVE-2019-2949",
"url": "https://bugzilla.suse.com/1172277"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.8,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-2949"
},
{
"cve": "CVE-2019-2958",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-2958"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13; Java SE Embedded: 8u221. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 5.9 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-2958",
"url": "https://www.suse.com/security/cve/CVE-2019-2958"
},
{
"category": "external",
"summary": "SUSE Bug 1154212 for CVE-2019-2958",
"url": "https://bugzilla.suse.com/1154212"
},
{
"category": "external",
"summary": "SUSE Bug 1158442 for CVE-2019-2958",
"url": "https://bugzilla.suse.com/1158442"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-2958"
},
{
"cve": "CVE-2019-2962",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-2962"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: 2D). Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13; Java SE Embedded: 8u221. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 3.7 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-2962",
"url": "https://www.suse.com/security/cve/CVE-2019-2962"
},
{
"category": "external",
"summary": "SUSE Bug 1154212 for CVE-2019-2962",
"url": "https://bugzilla.suse.com/1154212"
},
{
"category": "external",
"summary": "SUSE Bug 1158442 for CVE-2019-2962",
"url": "https://bugzilla.suse.com/1158442"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-2962"
},
{
"cve": "CVE-2019-2964",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-2964"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Concurrency). Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13; Java SE Embedded: 8u221. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.0 Base Score 3.7 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-2964",
"url": "https://www.suse.com/security/cve/CVE-2019-2964"
},
{
"category": "external",
"summary": "SUSE Bug 1154212 for CVE-2019-2964",
"url": "https://bugzilla.suse.com/1154212"
},
{
"category": "external",
"summary": "SUSE Bug 1158442 for CVE-2019-2964",
"url": "https://bugzilla.suse.com/1158442"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-2964"
},
{
"cve": "CVE-2019-2973",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-2973"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JAXP). Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13; Java SE Embedded: 8u221. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 3.7 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-2973",
"url": "https://www.suse.com/security/cve/CVE-2019-2973"
},
{
"category": "external",
"summary": "SUSE Bug 1154212 for CVE-2019-2973",
"url": "https://bugzilla.suse.com/1154212"
},
{
"category": "external",
"summary": "SUSE Bug 1158442 for CVE-2019-2973",
"url": "https://bugzilla.suse.com/1158442"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-2973"
},
{
"cve": "CVE-2019-2975",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-2975"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Scripting). Supported versions that are affected are Java SE: 8u221, 11.0.4 and 13; Java SE Embedded: 8u221. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 4.8 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-2975",
"url": "https://www.suse.com/security/cve/CVE-2019-2975"
},
{
"category": "external",
"summary": "SUSE Bug 1154212 for CVE-2019-2975",
"url": "https://bugzilla.suse.com/1154212"
},
{
"category": "external",
"summary": "SUSE Bug 1158442 for CVE-2019-2975",
"url": "https://bugzilla.suse.com/1158442"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.8,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-2975"
},
{
"cve": "CVE-2019-2977",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-2977"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE product of Oracle Java SE (component: Hotspot). Supported versions that are affected are Java SE: 11.0.4 and 13. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Java SE. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 4.8 (Confidentiality and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-2977",
"url": "https://www.suse.com/security/cve/CVE-2019-2977"
},
{
"category": "external",
"summary": "SUSE Bug 1154212 for CVE-2019-2977",
"url": "https://bugzilla.suse.com/1154212"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-2977"
},
{
"cve": "CVE-2019-2978",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-2978"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Networking). Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13; Java SE Embedded: 8u221. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 3.7 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-2978",
"url": "https://www.suse.com/security/cve/CVE-2019-2978"
},
{
"category": "external",
"summary": "SUSE Bug 1154212 for CVE-2019-2978",
"url": "https://bugzilla.suse.com/1154212"
},
{
"category": "external",
"summary": "SUSE Bug 1158442 for CVE-2019-2978",
"url": "https://bugzilla.suse.com/1158442"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-2978"
},
{
"cve": "CVE-2019-2981",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-2981"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JAXP). Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13; Java SE Embedded: 8u221. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 3.7 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-2981",
"url": "https://www.suse.com/security/cve/CVE-2019-2981"
},
{
"category": "external",
"summary": "SUSE Bug 1154212 for CVE-2019-2981",
"url": "https://bugzilla.suse.com/1154212"
},
{
"category": "external",
"summary": "SUSE Bug 1158442 for CVE-2019-2981",
"url": "https://bugzilla.suse.com/1158442"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-2981"
},
{
"cve": "CVE-2019-2983",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-2983"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Serialization). Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13; Java SE Embedded: 8u221. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 3.7 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-2983",
"url": "https://www.suse.com/security/cve/CVE-2019-2983"
},
{
"category": "external",
"summary": "SUSE Bug 1154212 for CVE-2019-2983",
"url": "https://bugzilla.suse.com/1154212"
},
{
"category": "external",
"summary": "SUSE Bug 1158442 for CVE-2019-2983",
"url": "https://bugzilla.suse.com/1158442"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-2983"
},
{
"cve": "CVE-2019-2987",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-2987"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE product of Oracle Java SE (component: 2D). Supported versions that are affected are Java SE: 11.0.4 and 13. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 3.7 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-2987",
"url": "https://www.suse.com/security/cve/CVE-2019-2987"
},
{
"category": "external",
"summary": "SUSE Bug 1154212 for CVE-2019-2987",
"url": "https://bugzilla.suse.com/1154212"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-2987"
},
{
"cve": "CVE-2019-2988",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-2988"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: 2D). Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13; Java SE Embedded: 8u221. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 3.7 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-2988",
"url": "https://www.suse.com/security/cve/CVE-2019-2988"
},
{
"category": "external",
"summary": "SUSE Bug 1154212 for CVE-2019-2988",
"url": "https://bugzilla.suse.com/1154212"
},
{
"category": "external",
"summary": "SUSE Bug 1158442 for CVE-2019-2988",
"url": "https://bugzilla.suse.com/1158442"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-2988"
},
{
"cve": "CVE-2019-2989",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-2989"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Networking). Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13; Java SE Embedded: 8u221. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. While the vulnerability is in Java SE, Java SE Embedded, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS v3.0 Base Score 6.8 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-2989",
"url": "https://www.suse.com/security/cve/CVE-2019-2989"
},
{
"category": "external",
"summary": "SUSE Bug 1154212 for CVE-2019-2989",
"url": "https://bugzilla.suse.com/1154212"
},
{
"category": "external",
"summary": "SUSE Bug 1158442 for CVE-2019-2989",
"url": "https://bugzilla.suse.com/1158442"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-2989"
},
{
"cve": "CVE-2019-2992",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-2992"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: 2D). Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13; Java SE Embedded: 8u221. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 3.7 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-2992",
"url": "https://www.suse.com/security/cve/CVE-2019-2992"
},
{
"category": "external",
"summary": "SUSE Bug 1154212 for CVE-2019-2992",
"url": "https://bugzilla.suse.com/1154212"
},
{
"category": "external",
"summary": "SUSE Bug 1158442 for CVE-2019-2992",
"url": "https://bugzilla.suse.com/1158442"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-2992"
},
{
"cve": "CVE-2019-2999",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-2999"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE product of Oracle Java SE (component: Javadoc). Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE accessible data as well as unauthorized read access to a subset of Java SE accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 4.7 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-2999",
"url": "https://www.suse.com/security/cve/CVE-2019-2999"
},
{
"category": "external",
"summary": "SUSE Bug 1154212 for CVE-2019-2999",
"url": "https://bugzilla.suse.com/1154212"
},
{
"category": "external",
"summary": "SUSE Bug 1158442 for CVE-2019-2999",
"url": "https://bugzilla.suse.com/1158442"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-2999"
},
{
"cve": "CVE-2019-7317",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-7317"
}
],
"notes": [
{
"category": "general",
"text": "png_image_free in png.c in libpng 1.6.x before 1.6.37 has a use-after-free because png_image_free_function is called under png_safe_execute.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-7317",
"url": "https://www.suse.com/security/cve/CVE-2019-7317"
},
{
"category": "external",
"summary": "SUSE Bug 1124211 for CVE-2019-7317",
"url": "https://bugzilla.suse.com/1124211"
},
{
"category": "external",
"summary": "SUSE Bug 1135824 for CVE-2019-7317",
"url": "https://bugzilla.suse.com/1135824"
},
{
"category": "external",
"summary": "SUSE Bug 1141780 for CVE-2019-7317",
"url": "https://bugzilla.suse.com/1141780"
},
{
"category": "external",
"summary": "SUSE Bug 1147021 for CVE-2019-7317",
"url": "https://bugzilla.suse.com/1147021"
},
{
"category": "external",
"summary": "SUSE Bug 1165297 for CVE-2019-7317",
"url": "https://bugzilla.suse.com/1165297"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-7317"
},
{
"cve": "CVE-2020-14556",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-14556"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 8u251, 11.0.7 and 14.0.1; Java SE Embedded: 8u251. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded accessible data as well as unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.1 Base Score 4.8 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-14556",
"url": "https://www.suse.com/security/cve/CVE-2020-14556"
},
{
"category": "external",
"summary": "SUSE Bug 1174157 for CVE-2020-14556",
"url": "https://bugzilla.suse.com/1174157"
},
{
"category": "external",
"summary": "SUSE Bug 1175259 for CVE-2020-14556",
"url": "https://bugzilla.suse.com/1175259"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.8,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-14556"
},
{
"cve": "CVE-2020-14562",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-14562"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE product of Oracle Java SE (component: ImageIO). Supported versions that are affected are Java SE: 11.0.7 and 14.0.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-14562",
"url": "https://www.suse.com/security/cve/CVE-2020-14562"
},
{
"category": "external",
"summary": "SUSE Bug 1174157 for CVE-2020-14562",
"url": "https://bugzilla.suse.com/1174157"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-14562"
},
{
"cve": "CVE-2020-14573",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-14573"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE product of Oracle Java SE (component: Hotspot). Supported versions that are affected are Java SE: 11.0.7 and 14.0.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE accessible data. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.1 Base Score 3.7 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-14573",
"url": "https://www.suse.com/security/cve/CVE-2020-14573"
},
{
"category": "external",
"summary": "SUSE Bug 1174157 for CVE-2020-14573",
"url": "https://bugzilla.suse.com/1174157"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-14573"
},
{
"cve": "CVE-2020-14577",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-14577"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JSSE). Supported versions that are affected are Java SE: 7u261, 8u251, 11.0.7 and 14.0.1; Java SE Embedded: 8u251. Difficult to exploit vulnerability allows unauthenticated attacker with network access via TLS to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.1 Base Score 3.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-14577",
"url": "https://www.suse.com/security/cve/CVE-2020-14577"
},
{
"category": "external",
"summary": "SUSE Bug 1174157 for CVE-2020-14577",
"url": "https://bugzilla.suse.com/1174157"
},
{
"category": "external",
"summary": "SUSE Bug 1175259 for CVE-2020-14577",
"url": "https://bugzilla.suse.com/1175259"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-14577"
},
{
"cve": "CVE-2020-14581",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-14581"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: 2D). Supported versions that are affected are Java SE: 8u251, 11.0.7 and 14.0.1; Java SE Embedded: 8u251. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.1 Base Score 3.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-14581",
"url": "https://www.suse.com/security/cve/CVE-2020-14581"
},
{
"category": "external",
"summary": "SUSE Bug 1174157 for CVE-2020-14581",
"url": "https://bugzilla.suse.com/1174157"
},
{
"category": "external",
"summary": "SUSE Bug 1175259 for CVE-2020-14581",
"url": "https://bugzilla.suse.com/1175259"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-14581"
},
{
"cve": "CVE-2020-14583",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-14583"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u261, 8u251, 11.0.7 and 14.0.1; Java SE Embedded: 8u251. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, Java SE Embedded, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 8.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-14583",
"url": "https://www.suse.com/security/cve/CVE-2020-14583"
},
{
"category": "external",
"summary": "SUSE Bug 1174157 for CVE-2020-14583",
"url": "https://bugzilla.suse.com/1174157"
},
{
"category": "external",
"summary": "SUSE Bug 1175259 for CVE-2020-14583",
"url": "https://bugzilla.suse.com/1175259"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.3,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-14583"
},
{
"cve": "CVE-2020-14593",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-14593"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: 2D). Supported versions that are affected are Java SE: 7u261, 8u251, 11.0.7 and 14.0.1; Java SE Embedded: 8u251. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, Java SE Embedded, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 7.4 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-14593",
"url": "https://www.suse.com/security/cve/CVE-2020-14593"
},
{
"category": "external",
"summary": "SUSE Bug 1174157 for CVE-2020-14593",
"url": "https://bugzilla.suse.com/1174157"
},
{
"category": "external",
"summary": "SUSE Bug 1175259 for CVE-2020-14593",
"url": "https://bugzilla.suse.com/1175259"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.4,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-14593"
},
{
"cve": "CVE-2020-14621",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-14621"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JAXP). Supported versions that are affected are Java SE: 7u261, 8u251, 11.0.7 and 14.0.1; Java SE Embedded: 8u251. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 5.3 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-14621",
"url": "https://www.suse.com/security/cve/CVE-2020-14621"
},
{
"category": "external",
"summary": "SUSE Bug 1174157 for CVE-2020-14621",
"url": "https://bugzilla.suse.com/1174157"
},
{
"category": "external",
"summary": "SUSE Bug 1175259 for CVE-2020-14621",
"url": "https://bugzilla.suse.com/1175259"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-14621"
},
{
"cve": "CVE-2020-14779",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-14779"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Serialization). Supported versions that are affected are Java SE: 7u271, 8u261, 11.0.8 and 15; Java SE Embedded: 8u261. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.1 Base Score 3.7 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-14779",
"url": "https://www.suse.com/security/cve/CVE-2020-14779"
},
{
"category": "external",
"summary": "SUSE Bug 1177943 for CVE-2020-14779",
"url": "https://bugzilla.suse.com/1177943"
},
{
"category": "external",
"summary": "SUSE Bug 1180063 for CVE-2020-14779",
"url": "https://bugzilla.suse.com/1180063"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2020-14779"
},
{
"cve": "CVE-2020-14781",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-14781"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JNDI). Supported versions that are affected are Java SE: 7u271, 8u261, 11.0.8 and 15; Java SE Embedded: 8u261. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.1 Base Score 3.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-14781",
"url": "https://www.suse.com/security/cve/CVE-2020-14781"
},
{
"category": "external",
"summary": "SUSE Bug 1177943 for CVE-2020-14781",
"url": "https://bugzilla.suse.com/1177943"
},
{
"category": "external",
"summary": "SUSE Bug 1180063 for CVE-2020-14781",
"url": "https://bugzilla.suse.com/1180063"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2020-14781"
},
{
"cve": "CVE-2020-14782",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-14782"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u271, 8u261, 11.0.8 and 15; Java SE Embedded: 8u261. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded accessible data. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.1 Base Score 3.7 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-14782",
"url": "https://www.suse.com/security/cve/CVE-2020-14782"
},
{
"category": "external",
"summary": "SUSE Bug 1177943 for CVE-2020-14782",
"url": "https://bugzilla.suse.com/1177943"
},
{
"category": "external",
"summary": "SUSE Bug 1180063 for CVE-2020-14782",
"url": "https://bugzilla.suse.com/1180063"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2020-14782"
},
{
"cve": "CVE-2020-14792",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-14792"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Hotspot). Supported versions that are affected are Java SE: 7u271, 8u261, 11.0.8 and 15; Java SE Embedded: 8u261. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded accessible data as well as unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.1 Base Score 4.2 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-14792",
"url": "https://www.suse.com/security/cve/CVE-2020-14792"
},
{
"category": "external",
"summary": "SUSE Bug 1177943 for CVE-2020-14792",
"url": "https://bugzilla.suse.com/1177943"
},
{
"category": "external",
"summary": "SUSE Bug 1180063 for CVE-2020-14792",
"url": "https://bugzilla.suse.com/1180063"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.2,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2020-14792"
},
{
"cve": "CVE-2020-14796",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-14796"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u271, 8u261, 11.0.8 and 15; Java SE Embedded: 8u261. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 3.1 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-14796",
"url": "https://www.suse.com/security/cve/CVE-2020-14796"
},
{
"category": "external",
"summary": "SUSE Bug 1177943 for CVE-2020-14796",
"url": "https://bugzilla.suse.com/1177943"
},
{
"category": "external",
"summary": "SUSE Bug 1180063 for CVE-2020-14796",
"url": "https://bugzilla.suse.com/1180063"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.1,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2020-14796"
},
{
"cve": "CVE-2020-14797",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-14797"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u271, 8u261, 11.0.8 and 15; Java SE Embedded: 8u261. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded accessible data. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.1 Base Score 3.7 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-14797",
"url": "https://www.suse.com/security/cve/CVE-2020-14797"
},
{
"category": "external",
"summary": "SUSE Bug 1177943 for CVE-2020-14797",
"url": "https://bugzilla.suse.com/1177943"
},
{
"category": "external",
"summary": "SUSE Bug 1180063 for CVE-2020-14797",
"url": "https://bugzilla.suse.com/1180063"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2020-14797"
},
{
"cve": "CVE-2020-14798",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-14798"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u271, 8u261, 11.0.8 and 15; Java SE Embedded: 8u261. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 3.1 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-14798",
"url": "https://www.suse.com/security/cve/CVE-2020-14798"
},
{
"category": "external",
"summary": "SUSE Bug 1177943 for CVE-2020-14798",
"url": "https://bugzilla.suse.com/1177943"
},
{
"category": "external",
"summary": "SUSE Bug 1180063 for CVE-2020-14798",
"url": "https://bugzilla.suse.com/1180063"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2020-14798"
},
{
"cve": "CVE-2020-14803",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-14803"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 11.0.8 and 15. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-14803",
"url": "https://www.suse.com/security/cve/CVE-2020-14803"
},
{
"category": "external",
"summary": "SUSE Bug 1177943 for CVE-2020-14803",
"url": "https://bugzilla.suse.com/1177943"
},
{
"category": "external",
"summary": "SUSE Bug 1181239 for CVE-2020-14803",
"url": "https://bugzilla.suse.com/1181239"
},
{
"category": "external",
"summary": "SUSE Bug 1182186 for CVE-2020-14803",
"url": "https://bugzilla.suse.com/1182186"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2020-14803"
},
{
"cve": "CVE-2020-2583",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-2583"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Serialization). Supported versions that are affected are Java SE: 7u241, 8u231, 11.0.5 and 13.0.1; Java SE Embedded: 8u231. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 3.7 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-2583",
"url": "https://www.suse.com/security/cve/CVE-2020-2583"
},
{
"category": "external",
"summary": "SUSE Bug 1160968 for CVE-2020-2583",
"url": "https://bugzilla.suse.com/1160968"
},
{
"category": "external",
"summary": "SUSE Bug 1162972 for CVE-2020-2583",
"url": "https://bugzilla.suse.com/1162972"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2020-2583"
},
{
"cve": "CVE-2020-2590",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-2590"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Security). Supported versions that are affected are Java SE: 7u241, 8u231, 11.0.5 and 13.0.1; Java SE Embedded: 8u231. Difficult to exploit vulnerability allows unauthenticated attacker with network access via Kerberos to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 3.7 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-2590",
"url": "https://www.suse.com/security/cve/CVE-2020-2590"
},
{
"category": "external",
"summary": "SUSE Bug 1160968 for CVE-2020-2590",
"url": "https://bugzilla.suse.com/1160968"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2020-2590"
},
{
"cve": "CVE-2020-2593",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-2593"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Networking). Supported versions that are affected are Java SE: 7u241, 8u231, 11.0.5 and 13.0.1; Java SE Embedded: 8u231. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded accessible data as well as unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 4.8 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-2593",
"url": "https://www.suse.com/security/cve/CVE-2020-2593"
},
{
"category": "external",
"summary": "SUSE Bug 1160968 for CVE-2020-2593",
"url": "https://bugzilla.suse.com/1160968"
},
{
"category": "external",
"summary": "SUSE Bug 1162972 for CVE-2020-2593",
"url": "https://bugzilla.suse.com/1162972"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.8,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2020-2593"
},
{
"cve": "CVE-2020-2601",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-2601"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Security). Supported versions that are affected are Java SE: 7u241, 8u231, 11.0.5 and 13.0.1; Java SE Embedded: 8u231. Difficult to exploit vulnerability allows unauthenticated attacker with network access via Kerberos to compromise Java SE, Java SE Embedded. While the vulnerability is in Java SE, Java SE Embedded, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 6.8 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-2601",
"url": "https://www.suse.com/security/cve/CVE-2020-2601"
},
{
"category": "external",
"summary": "SUSE Bug 1160968 for CVE-2020-2601",
"url": "https://bugzilla.suse.com/1160968"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.8,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2020-2601"
},
{
"cve": "CVE-2020-2604",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-2604"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Serialization). Supported versions that are affected are Java SE: 7u241, 8u231, 11.0.5 and 13.0.1; Java SE Embedded: 8u231. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in takeover of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS v3.0 Base Score 8.1 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-2604",
"url": "https://www.suse.com/security/cve/CVE-2020-2604"
},
{
"category": "external",
"summary": "SUSE Bug 1160968 for CVE-2020-2604",
"url": "https://bugzilla.suse.com/1160968"
},
{
"category": "external",
"summary": "SUSE Bug 1162972 for CVE-2020-2604",
"url": "https://bugzilla.suse.com/1162972"
},
{
"category": "external",
"summary": "SUSE Bug 1165863 for CVE-2020-2604",
"url": "https://bugzilla.suse.com/1165863"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-2604"
},
{
"cve": "CVE-2020-2654",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-2654"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u241, 8u231, 11.0.5 and 13.0.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.0 Base Score 3.7 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-2654",
"url": "https://www.suse.com/security/cve/CVE-2020-2654"
},
{
"category": "external",
"summary": "SUSE Bug 1160968 for CVE-2020-2654",
"url": "https://bugzilla.suse.com/1160968"
},
{
"category": "external",
"summary": "SUSE Bug 1172277 for CVE-2020-2654",
"url": "https://bugzilla.suse.com/1172277"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2020-2654"
},
{
"cve": "CVE-2020-2655",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-2655"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE product of Oracle Java SE (component: JSSE). Supported versions that are affected are Java SE: 11.0.5 and 13.0.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Java SE. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE accessible data as well as unauthorized read access to a subset of Java SE accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 4.8 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-2655",
"url": "https://www.suse.com/security/cve/CVE-2020-2655"
},
{
"category": "external",
"summary": "SUSE Bug 1160968 for CVE-2020-2655",
"url": "https://bugzilla.suse.com/1160968"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.8,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2020-2655"
},
{
"cve": "CVE-2020-2754",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-2754"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Scripting). Supported versions that are affected are Java SE: 8u241, 11.0.6 and 14; Java SE Embedded: 8u241. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 3.7 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-2754",
"url": "https://www.suse.com/security/cve/CVE-2020-2754"
},
{
"category": "external",
"summary": "SUSE Bug 1169511 for CVE-2020-2754",
"url": "https://bugzilla.suse.com/1169511"
},
{
"category": "external",
"summary": "SUSE Bug 1172277 for CVE-2020-2754",
"url": "https://bugzilla.suse.com/1172277"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-2754"
},
{
"cve": "CVE-2020-2755",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-2755"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Scripting). Supported versions that are affected are Java SE: 8u241, 11.0.6 and 14; Java SE Embedded: 8u241. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 3.7 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-2755",
"url": "https://www.suse.com/security/cve/CVE-2020-2755"
},
{
"category": "external",
"summary": "SUSE Bug 1169511 for CVE-2020-2755",
"url": "https://bugzilla.suse.com/1169511"
},
{
"category": "external",
"summary": "SUSE Bug 1172277 for CVE-2020-2755",
"url": "https://bugzilla.suse.com/1172277"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-2755"
},
{
"cve": "CVE-2020-2756",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-2756"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Serialization). Supported versions that are affected are Java SE: 7u251, 8u241, 11.0.6 and 14; Java SE Embedded: 8u241. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 3.7 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-2756",
"url": "https://www.suse.com/security/cve/CVE-2020-2756"
},
{
"category": "external",
"summary": "SUSE Bug 1169511 for CVE-2020-2756",
"url": "https://bugzilla.suse.com/1169511"
},
{
"category": "external",
"summary": "SUSE Bug 1172277 for CVE-2020-2756",
"url": "https://bugzilla.suse.com/1172277"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-2756"
},
{
"cve": "CVE-2020-2757",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-2757"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Serialization). Supported versions that are affected are Java SE: 7u251, 8u241, 11.0.6 and 14; Java SE Embedded: 8u241. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 3.7 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-2757",
"url": "https://www.suse.com/security/cve/CVE-2020-2757"
},
{
"category": "external",
"summary": "SUSE Bug 1169511 for CVE-2020-2757",
"url": "https://bugzilla.suse.com/1169511"
},
{
"category": "external",
"summary": "SUSE Bug 1172277 for CVE-2020-2757",
"url": "https://bugzilla.suse.com/1172277"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-2757"
},
{
"cve": "CVE-2020-2767",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-2767"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE product of Oracle Java SE (component: JSSE). Supported versions that are affected are Java SE: 11.0.6 and 14. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Java SE. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE accessible data as well as unauthorized read access to a subset of Java SE accessible data. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 4.8 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-2767",
"url": "https://www.suse.com/security/cve/CVE-2020-2767"
},
{
"category": "external",
"summary": "SUSE Bug 1169511 for CVE-2020-2767",
"url": "https://bugzilla.suse.com/1169511"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.8,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-2767"
},
{
"cve": "CVE-2020-2773",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-2773"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Security). Supported versions that are affected are Java SE: 7u251, 8u241, 11.0.6 and 14; Java SE Embedded: 8u241. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 3.7 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-2773",
"url": "https://www.suse.com/security/cve/CVE-2020-2773"
},
{
"category": "external",
"summary": "SUSE Bug 1169511 for CVE-2020-2773",
"url": "https://bugzilla.suse.com/1169511"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-2773"
},
{
"cve": "CVE-2020-2778",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-2778"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE product of Oracle Java SE (component: JSSE). Supported versions that are affected are Java SE: 11.0.6 and 14. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Java SE. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE accessible data. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 3.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-2778",
"url": "https://www.suse.com/security/cve/CVE-2020-2778"
},
{
"category": "external",
"summary": "SUSE Bug 1169511 for CVE-2020-2778",
"url": "https://bugzilla.suse.com/1169511"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-2778"
},
{
"cve": "CVE-2020-2781",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-2781"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JSSE). Supported versions that are affected are Java SE: 7u251, 8u241, 11.0.6 and 14; Java SE Embedded: 8u241. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-2781",
"url": "https://www.suse.com/security/cve/CVE-2020-2781"
},
{
"category": "external",
"summary": "SUSE Bug 1169511 for CVE-2020-2781",
"url": "https://bugzilla.suse.com/1169511"
},
{
"category": "external",
"summary": "SUSE Bug 1172277 for CVE-2020-2781",
"url": "https://bugzilla.suse.com/1172277"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-2781"
},
{
"cve": "CVE-2020-2800",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-2800"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Lightweight HTTP Server). Supported versions that are affected are Java SE: 7u251, 8u241, 11.0.6 and 14; Java SE Embedded: 8u241. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded accessible data as well as unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.0 Base Score 4.8 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-2800",
"url": "https://www.suse.com/security/cve/CVE-2020-2800"
},
{
"category": "external",
"summary": "SUSE Bug 1169511 for CVE-2020-2800",
"url": "https://bugzilla.suse.com/1169511"
},
{
"category": "external",
"summary": "SUSE Bug 1172277 for CVE-2020-2800",
"url": "https://bugzilla.suse.com/1172277"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.8,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-2800"
},
{
"cve": "CVE-2020-2803",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-2803"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u251, 8u241, 11.0.6 and 14; Java SE Embedded: 8u241. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, Java SE Embedded, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 8.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-2803",
"url": "https://www.suse.com/security/cve/CVE-2020-2803"
},
{
"category": "external",
"summary": "SUSE Bug 1169511 for CVE-2020-2803",
"url": "https://bugzilla.suse.com/1169511"
},
{
"category": "external",
"summary": "SUSE Bug 1172277 for CVE-2020-2803",
"url": "https://bugzilla.suse.com/1172277"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.3,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-2803"
},
{
"cve": "CVE-2020-2805",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-2805"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u251, 8u241, 11.0.6 and 14; Java SE Embedded: 8u241. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, Java SE Embedded, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 8.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-2805",
"url": "https://www.suse.com/security/cve/CVE-2020-2805"
},
{
"category": "external",
"summary": "SUSE Bug 1169511 for CVE-2020-2805",
"url": "https://bugzilla.suse.com/1169511"
},
{
"category": "external",
"summary": "SUSE Bug 1172277 for CVE-2020-2805",
"url": "https://bugzilla.suse.com/1172277"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.3,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-2805"
},
{
"cve": "CVE-2020-2816",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-2816"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE product of Oracle Java SE (component: JSSE). Supported versions that are affected are Java SE: 11.0.6 and 14. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Java SE. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Java SE accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.0 Base Score 7.5 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-2816",
"url": "https://www.suse.com/security/cve/CVE-2020-2816"
},
{
"category": "external",
"summary": "SUSE Bug 1169511 for CVE-2020-2816",
"url": "https://bugzilla.suse.com/1169511"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-2816"
},
{
"cve": "CVE-2020-2830",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-2830"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Concurrency). Supported versions that are affected are Java SE: 7u251, 8u241, 11.0.6 and 14; Java SE Embedded: 8u241. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-2830",
"url": "https://www.suse.com/security/cve/CVE-2020-2830"
},
{
"category": "external",
"summary": "SUSE Bug 1169511 for CVE-2020-2830",
"url": "https://bugzilla.suse.com/1169511"
},
{
"category": "external",
"summary": "SUSE Bug 1172277 for CVE-2020-2830",
"url": "https://bugzilla.suse.com/1172277"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-2830"
},
{
"cve": "CVE-2021-2161",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-2161"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u291, 8u281, 11.0.10, 16; Java SE Embedded: 8u281; Oracle GraalVM Enterprise Edition: 19.3.5, 20.3.1.2 and 21.0.0.2. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Java SE, Java SE Embedded, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. It can also be exploited by supplying untrusted data to APIs in the specified Component. CVSS 3.1 Base Score 5.9 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-2161",
"url": "https://www.suse.com/security/cve/CVE-2021-2161"
},
{
"category": "external",
"summary": "SUSE Bug 1185056 for CVE-2021-2161",
"url": "https://bugzilla.suse.com/1185056"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-2161"
},
{
"cve": "CVE-2021-2163",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-2163"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u291, 8u281, 11.0.10, 16; Java SE Embedded: 8u281; Oracle GraalVM Enterprise Edition: 19.3.5, 20.3.1.2 and 21.0.0.2. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, Oracle GraalVM Enterprise Edition. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Java SE, Java SE Embedded, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 5.3 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-2163",
"url": "https://www.suse.com/security/cve/CVE-2021-2163"
},
{
"category": "external",
"summary": "SUSE Bug 1185055 for CVE-2021-2163",
"url": "https://bugzilla.suse.com/1185055"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-2163"
},
{
"cve": "CVE-2021-2341",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-2341"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking). Supported versions that are affected are Java SE: 7u301, 8u291, 11.0.11, 16.0.1; Oracle GraalVM Enterprise Edition: 20.3.2 and 21.1.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Oracle GraalVM Enterprise Edition. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 3.1 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-2341",
"url": "https://www.suse.com/security/cve/CVE-2021-2341"
},
{
"category": "external",
"summary": "SUSE Bug 1188564 for CVE-2021-2341",
"url": "https://bugzilla.suse.com/1188564"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.1,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-2341"
},
{
"cve": "CVE-2021-2369",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-2369"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Library). Supported versions that are affected are Java SE: 7u301, 8u291, 11.0.11, 16.0.1; Oracle GraalVM Enterprise Edition: 20.3.2 and 21.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Oracle GraalVM Enterprise Edition. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 4.3 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-2369",
"url": "https://www.suse.com/security/cve/CVE-2021-2369"
},
{
"category": "external",
"summary": "SUSE Bug 1188565 for CVE-2021-2369",
"url": "https://bugzilla.suse.com/1188565"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-2369"
},
{
"cve": "CVE-2021-2388",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-2388"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot). Supported versions that are affected are Java SE: 8u291, 11.0.11, 16.0.1; Oracle GraalVM Enterprise Edition: 20.3.2 and 21.1.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Oracle GraalVM Enterprise Edition. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of Java SE, Oracle GraalVM Enterprise Edition. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 7.5 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-2388",
"url": "https://www.suse.com/security/cve/CVE-2021-2388"
},
{
"category": "external",
"summary": "SUSE Bug 1188566 for CVE-2021-2388",
"url": "https://bugzilla.suse.com/1188566"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-accessibility-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.12.0-3.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.12.0-3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-2388"
}
]
}
opensuse-su-2024:10872-1
Vulnerability from csaf_opensuse
Published
2024-06-15 00:00
Modified
2024-06-15 00:00
Summary
java-13-openjdk-13.0.8.0-3.1 on GA media
Notes
Title of the patch
java-13-openjdk-13.0.8.0-3.1 on GA media
Description of the patch
These are all security issues fixed in the java-13-openjdk-13.0.8.0-3.1 package on the GA media of openSUSE Tumbleweed.
Patchnames
openSUSE-Tumbleweed-2024-10872
Terms of use
CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "java-13-openjdk-13.0.8.0-3.1 on GA media",
"title": "Title of the patch"
},
{
"category": "description",
"text": "These are all security issues fixed in the java-13-openjdk-13.0.8.0-3.1 package on the GA media of openSUSE Tumbleweed.",
"title": "Description of the patch"
},
{
"category": "details",
"text": "openSUSE-Tumbleweed-2024-10872",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2024_10872-1.json"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-11212 page",
"url": "https://www.suse.com/security/cve/CVE-2018-11212/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-2790 page",
"url": "https://www.suse.com/security/cve/CVE-2018-2790/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-2794 page",
"url": "https://www.suse.com/security/cve/CVE-2018-2794/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-2795 page",
"url": "https://www.suse.com/security/cve/CVE-2018-2795/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-2796 page",
"url": "https://www.suse.com/security/cve/CVE-2018-2796/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-2797 page",
"url": "https://www.suse.com/security/cve/CVE-2018-2797/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-2798 page",
"url": "https://www.suse.com/security/cve/CVE-2018-2798/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-2799 page",
"url": "https://www.suse.com/security/cve/CVE-2018-2799/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-2814 page",
"url": "https://www.suse.com/security/cve/CVE-2018-2814/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-2825 page",
"url": "https://www.suse.com/security/cve/CVE-2018-2825/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-2826 page",
"url": "https://www.suse.com/security/cve/CVE-2018-2826/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-2940 page",
"url": "https://www.suse.com/security/cve/CVE-2018-2940/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-2952 page",
"url": "https://www.suse.com/security/cve/CVE-2018-2952/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-2972 page",
"url": "https://www.suse.com/security/cve/CVE-2018-2972/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-2973 page",
"url": "https://www.suse.com/security/cve/CVE-2018-2973/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-3136 page",
"url": "https://www.suse.com/security/cve/CVE-2018-3136/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-3139 page",
"url": "https://www.suse.com/security/cve/CVE-2018-3139/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-3149 page",
"url": "https://www.suse.com/security/cve/CVE-2018-3149/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-3150 page",
"url": "https://www.suse.com/security/cve/CVE-2018-3150/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-3157 page",
"url": "https://www.suse.com/security/cve/CVE-2018-3157/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-3169 page",
"url": "https://www.suse.com/security/cve/CVE-2018-3169/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-3180 page",
"url": "https://www.suse.com/security/cve/CVE-2018-3180/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-3183 page",
"url": "https://www.suse.com/security/cve/CVE-2018-3183/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-2422 page",
"url": "https://www.suse.com/security/cve/CVE-2019-2422/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-2426 page",
"url": "https://www.suse.com/security/cve/CVE-2019-2426/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-2602 page",
"url": "https://www.suse.com/security/cve/CVE-2019-2602/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-2684 page",
"url": "https://www.suse.com/security/cve/CVE-2019-2684/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-2745 page",
"url": "https://www.suse.com/security/cve/CVE-2019-2745/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-2762 page",
"url": "https://www.suse.com/security/cve/CVE-2019-2762/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-2766 page",
"url": "https://www.suse.com/security/cve/CVE-2019-2766/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-2769 page",
"url": "https://www.suse.com/security/cve/CVE-2019-2769/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-2786 page",
"url": "https://www.suse.com/security/cve/CVE-2019-2786/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-2816 page",
"url": "https://www.suse.com/security/cve/CVE-2019-2816/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-2818 page",
"url": "https://www.suse.com/security/cve/CVE-2019-2818/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-2821 page",
"url": "https://www.suse.com/security/cve/CVE-2019-2821/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-2894 page",
"url": "https://www.suse.com/security/cve/CVE-2019-2894/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-2933 page",
"url": "https://www.suse.com/security/cve/CVE-2019-2933/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-2945 page",
"url": "https://www.suse.com/security/cve/CVE-2019-2945/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-2949 page",
"url": "https://www.suse.com/security/cve/CVE-2019-2949/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-2958 page",
"url": "https://www.suse.com/security/cve/CVE-2019-2958/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-2962 page",
"url": "https://www.suse.com/security/cve/CVE-2019-2962/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-2964 page",
"url": "https://www.suse.com/security/cve/CVE-2019-2964/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-2973 page",
"url": "https://www.suse.com/security/cve/CVE-2019-2973/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-2975 page",
"url": "https://www.suse.com/security/cve/CVE-2019-2975/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-2977 page",
"url": "https://www.suse.com/security/cve/CVE-2019-2977/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-2978 page",
"url": "https://www.suse.com/security/cve/CVE-2019-2978/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-2981 page",
"url": "https://www.suse.com/security/cve/CVE-2019-2981/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-2983 page",
"url": "https://www.suse.com/security/cve/CVE-2019-2983/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-2987 page",
"url": "https://www.suse.com/security/cve/CVE-2019-2987/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-2988 page",
"url": "https://www.suse.com/security/cve/CVE-2019-2988/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-2989 page",
"url": "https://www.suse.com/security/cve/CVE-2019-2989/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-2992 page",
"url": "https://www.suse.com/security/cve/CVE-2019-2992/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-2999 page",
"url": "https://www.suse.com/security/cve/CVE-2019-2999/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-7317 page",
"url": "https://www.suse.com/security/cve/CVE-2019-7317/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-14556 page",
"url": "https://www.suse.com/security/cve/CVE-2020-14556/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-14562 page",
"url": "https://www.suse.com/security/cve/CVE-2020-14562/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-14573 page",
"url": "https://www.suse.com/security/cve/CVE-2020-14573/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-14577 page",
"url": "https://www.suse.com/security/cve/CVE-2020-14577/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-14581 page",
"url": "https://www.suse.com/security/cve/CVE-2020-14581/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-14583 page",
"url": "https://www.suse.com/security/cve/CVE-2020-14583/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-14593 page",
"url": "https://www.suse.com/security/cve/CVE-2020-14593/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-14621 page",
"url": "https://www.suse.com/security/cve/CVE-2020-14621/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-14779 page",
"url": "https://www.suse.com/security/cve/CVE-2020-14779/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-14781 page",
"url": "https://www.suse.com/security/cve/CVE-2020-14781/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-14782 page",
"url": "https://www.suse.com/security/cve/CVE-2020-14782/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-14792 page",
"url": "https://www.suse.com/security/cve/CVE-2020-14792/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-14796 page",
"url": "https://www.suse.com/security/cve/CVE-2020-14796/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-14797 page",
"url": "https://www.suse.com/security/cve/CVE-2020-14797/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-14798 page",
"url": "https://www.suse.com/security/cve/CVE-2020-14798/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-14803 page",
"url": "https://www.suse.com/security/cve/CVE-2020-14803/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-2583 page",
"url": "https://www.suse.com/security/cve/CVE-2020-2583/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-2590 page",
"url": "https://www.suse.com/security/cve/CVE-2020-2590/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-2593 page",
"url": "https://www.suse.com/security/cve/CVE-2020-2593/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-2601 page",
"url": "https://www.suse.com/security/cve/CVE-2020-2601/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-2604 page",
"url": "https://www.suse.com/security/cve/CVE-2020-2604/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-2654 page",
"url": "https://www.suse.com/security/cve/CVE-2020-2654/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-2655 page",
"url": "https://www.suse.com/security/cve/CVE-2020-2655/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-2754 page",
"url": "https://www.suse.com/security/cve/CVE-2020-2754/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-2755 page",
"url": "https://www.suse.com/security/cve/CVE-2020-2755/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-2756 page",
"url": "https://www.suse.com/security/cve/CVE-2020-2756/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-2757 page",
"url": "https://www.suse.com/security/cve/CVE-2020-2757/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-2767 page",
"url": "https://www.suse.com/security/cve/CVE-2020-2767/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-2773 page",
"url": "https://www.suse.com/security/cve/CVE-2020-2773/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-2778 page",
"url": "https://www.suse.com/security/cve/CVE-2020-2778/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-2781 page",
"url": "https://www.suse.com/security/cve/CVE-2020-2781/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-2800 page",
"url": "https://www.suse.com/security/cve/CVE-2020-2800/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-2803 page",
"url": "https://www.suse.com/security/cve/CVE-2020-2803/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-2805 page",
"url": "https://www.suse.com/security/cve/CVE-2020-2805/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-2816 page",
"url": "https://www.suse.com/security/cve/CVE-2020-2816/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-2830 page",
"url": "https://www.suse.com/security/cve/CVE-2020-2830/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-2161 page",
"url": "https://www.suse.com/security/cve/CVE-2021-2161/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-2163 page",
"url": "https://www.suse.com/security/cve/CVE-2021-2163/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-2341 page",
"url": "https://www.suse.com/security/cve/CVE-2021-2341/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-2369 page",
"url": "https://www.suse.com/security/cve/CVE-2021-2369/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-2388 page",
"url": "https://www.suse.com/security/cve/CVE-2021-2388/"
}
],
"title": "java-13-openjdk-13.0.8.0-3.1 on GA media",
"tracking": {
"current_release_date": "2024-06-15T00:00:00Z",
"generator": {
"date": "2024-06-15T00:00:00Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "openSUSE-SU-2024:10872-1",
"initial_release_date": "2024-06-15T00:00:00Z",
"revision_history": [
{
"date": "2024-06-15T00:00:00Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "java-13-openjdk-13.0.8.0-3.1.aarch64",
"product": {
"name": "java-13-openjdk-13.0.8.0-3.1.aarch64",
"product_id": "java-13-openjdk-13.0.8.0-3.1.aarch64"
}
},
{
"category": "product_version",
"name": "java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"product": {
"name": "java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"product_id": "java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64"
}
},
{
"category": "product_version",
"name": "java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"product": {
"name": "java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"product_id": "java-13-openjdk-demo-13.0.8.0-3.1.aarch64"
}
},
{
"category": "product_version",
"name": "java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"product": {
"name": "java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"product_id": "java-13-openjdk-devel-13.0.8.0-3.1.aarch64"
}
},
{
"category": "product_version",
"name": "java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"product": {
"name": "java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"product_id": "java-13-openjdk-headless-13.0.8.0-3.1.aarch64"
}
},
{
"category": "product_version",
"name": "java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"product": {
"name": "java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"product_id": "java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64"
}
},
{
"category": "product_version",
"name": "java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"product": {
"name": "java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"product_id": "java-13-openjdk-jmods-13.0.8.0-3.1.aarch64"
}
},
{
"category": "product_version",
"name": "java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"product": {
"name": "java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"product_id": "java-13-openjdk-src-13.0.8.0-3.1.aarch64"
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "java-13-openjdk-13.0.8.0-3.1.ppc64le",
"product": {
"name": "java-13-openjdk-13.0.8.0-3.1.ppc64le",
"product_id": "java-13-openjdk-13.0.8.0-3.1.ppc64le"
}
},
{
"category": "product_version",
"name": "java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"product": {
"name": "java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"product_id": "java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le"
}
},
{
"category": "product_version",
"name": "java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"product": {
"name": "java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"product_id": "java-13-openjdk-demo-13.0.8.0-3.1.ppc64le"
}
},
{
"category": "product_version",
"name": "java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"product": {
"name": "java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"product_id": "java-13-openjdk-devel-13.0.8.0-3.1.ppc64le"
}
},
{
"category": "product_version",
"name": "java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"product": {
"name": "java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"product_id": "java-13-openjdk-headless-13.0.8.0-3.1.ppc64le"
}
},
{
"category": "product_version",
"name": "java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"product": {
"name": "java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"product_id": "java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le"
}
},
{
"category": "product_version",
"name": "java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"product": {
"name": "java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"product_id": "java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le"
}
},
{
"category": "product_version",
"name": "java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"product": {
"name": "java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"product_id": "java-13-openjdk-src-13.0.8.0-3.1.ppc64le"
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "java-13-openjdk-13.0.8.0-3.1.s390x",
"product": {
"name": "java-13-openjdk-13.0.8.0-3.1.s390x",
"product_id": "java-13-openjdk-13.0.8.0-3.1.s390x"
}
},
{
"category": "product_version",
"name": "java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"product": {
"name": "java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"product_id": "java-13-openjdk-accessibility-13.0.8.0-3.1.s390x"
}
},
{
"category": "product_version",
"name": "java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"product": {
"name": "java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"product_id": "java-13-openjdk-demo-13.0.8.0-3.1.s390x"
}
},
{
"category": "product_version",
"name": "java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"product": {
"name": "java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"product_id": "java-13-openjdk-devel-13.0.8.0-3.1.s390x"
}
},
{
"category": "product_version",
"name": "java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"product": {
"name": "java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"product_id": "java-13-openjdk-headless-13.0.8.0-3.1.s390x"
}
},
{
"category": "product_version",
"name": "java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"product": {
"name": "java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"product_id": "java-13-openjdk-javadoc-13.0.8.0-3.1.s390x"
}
},
{
"category": "product_version",
"name": "java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"product": {
"name": "java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"product_id": "java-13-openjdk-jmods-13.0.8.0-3.1.s390x"
}
},
{
"category": "product_version",
"name": "java-13-openjdk-src-13.0.8.0-3.1.s390x",
"product": {
"name": "java-13-openjdk-src-13.0.8.0-3.1.s390x",
"product_id": "java-13-openjdk-src-13.0.8.0-3.1.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "java-13-openjdk-13.0.8.0-3.1.x86_64",
"product": {
"name": "java-13-openjdk-13.0.8.0-3.1.x86_64",
"product_id": "java-13-openjdk-13.0.8.0-3.1.x86_64"
}
},
{
"category": "product_version",
"name": "java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"product": {
"name": "java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"product_id": "java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64"
}
},
{
"category": "product_version",
"name": "java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"product": {
"name": "java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"product_id": "java-13-openjdk-demo-13.0.8.0-3.1.x86_64"
}
},
{
"category": "product_version",
"name": "java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"product": {
"name": "java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"product_id": "java-13-openjdk-devel-13.0.8.0-3.1.x86_64"
}
},
{
"category": "product_version",
"name": "java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"product": {
"name": "java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"product_id": "java-13-openjdk-headless-13.0.8.0-3.1.x86_64"
}
},
{
"category": "product_version",
"name": "java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"product": {
"name": "java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"product_id": "java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64"
}
},
{
"category": "product_version",
"name": "java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"product": {
"name": "java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"product_id": "java-13-openjdk-jmods-13.0.8.0-3.1.x86_64"
}
},
{
"category": "product_version",
"name": "java-13-openjdk-src-13.0.8.0-3.1.x86_64",
"product": {
"name": "java-13-openjdk-src-13.0.8.0-3.1.x86_64",
"product_id": "java-13-openjdk-src-13.0.8.0-3.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "openSUSE Tumbleweed",
"product": {
"name": "openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed",
"product_identification_helper": {
"cpe": "cpe:/o:opensuse:tumbleweed"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "java-13-openjdk-13.0.8.0-3.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64"
},
"product_reference": "java-13-openjdk-13.0.8.0-3.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-13-openjdk-13.0.8.0-3.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le"
},
"product_reference": "java-13-openjdk-13.0.8.0-3.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-13-openjdk-13.0.8.0-3.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x"
},
"product_reference": "java-13-openjdk-13.0.8.0-3.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-13-openjdk-13.0.8.0-3.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64"
},
"product_reference": "java-13-openjdk-13.0.8.0-3.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64"
},
"product_reference": "java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le"
},
"product_reference": "java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-13-openjdk-accessibility-13.0.8.0-3.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x"
},
"product_reference": "java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64"
},
"product_reference": "java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-13-openjdk-demo-13.0.8.0-3.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64"
},
"product_reference": "java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-13-openjdk-demo-13.0.8.0-3.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le"
},
"product_reference": "java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-13-openjdk-demo-13.0.8.0-3.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x"
},
"product_reference": "java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-13-openjdk-demo-13.0.8.0-3.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64"
},
"product_reference": "java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-13-openjdk-devel-13.0.8.0-3.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64"
},
"product_reference": "java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-13-openjdk-devel-13.0.8.0-3.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le"
},
"product_reference": "java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-13-openjdk-devel-13.0.8.0-3.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x"
},
"product_reference": "java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-13-openjdk-devel-13.0.8.0-3.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64"
},
"product_reference": "java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-13-openjdk-headless-13.0.8.0-3.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64"
},
"product_reference": "java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-13-openjdk-headless-13.0.8.0-3.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le"
},
"product_reference": "java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-13-openjdk-headless-13.0.8.0-3.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x"
},
"product_reference": "java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-13-openjdk-headless-13.0.8.0-3.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64"
},
"product_reference": "java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64"
},
"product_reference": "java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le"
},
"product_reference": "java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-13-openjdk-javadoc-13.0.8.0-3.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x"
},
"product_reference": "java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64"
},
"product_reference": "java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-13-openjdk-jmods-13.0.8.0-3.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64"
},
"product_reference": "java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le"
},
"product_reference": "java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-13-openjdk-jmods-13.0.8.0-3.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x"
},
"product_reference": "java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-13-openjdk-jmods-13.0.8.0-3.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64"
},
"product_reference": "java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-13-openjdk-src-13.0.8.0-3.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64"
},
"product_reference": "java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-13-openjdk-src-13.0.8.0-3.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le"
},
"product_reference": "java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-13-openjdk-src-13.0.8.0-3.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x"
},
"product_reference": "java-13-openjdk-src-13.0.8.0-3.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-13-openjdk-src-13.0.8.0-3.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
},
"product_reference": "java-13-openjdk-src-13.0.8.0-3.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2018-11212",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-11212"
}
],
"notes": [
{
"category": "general",
"text": "An issue was discovered in libjpeg 9a and 9d. The alloc_sarray function in jmemmgr.c allows remote attackers to cause a denial of service (divide-by-zero error) via a crafted file.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-11212",
"url": "https://www.suse.com/security/cve/CVE-2018-11212"
},
{
"category": "external",
"summary": "SUSE Bug 1122299 for CVE-2018-11212",
"url": "https://bugzilla.suse.com/1122299"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2018-11212"
},
{
"cve": "CVE-2018-2790",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-2790"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u181, 7u171, 8u162 and 10; Java SE Embedded: 8u161. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 3.1 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-2790",
"url": "https://www.suse.com/security/cve/CVE-2018-2790"
},
{
"category": "external",
"summary": "SUSE Bug 1090023 for CVE-2018-2790",
"url": "https://bugzilla.suse.com/1090023"
},
{
"category": "external",
"summary": "SUSE Bug 1093311 for CVE-2018-2790",
"url": "https://bugzilla.suse.com/1093311"
},
{
"category": "external",
"summary": "SUSE Bug 1101637 for CVE-2018-2790",
"url": "https://bugzilla.suse.com/1101637"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.1,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2018-2790"
},
{
"cve": "CVE-2018-2794",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-2794"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, JRockit component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u181, 7u171, 8u162, 10 and JRockit: R28.3.17. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Java SE, JRockit executes to compromise Java SE, JRockit. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, JRockit, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 7.7 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-2794",
"url": "https://www.suse.com/security/cve/CVE-2018-2794"
},
{
"category": "external",
"summary": "SUSE Bug 1090024 for CVE-2018-2794",
"url": "https://bugzilla.suse.com/1090024"
},
{
"category": "external",
"summary": "SUSE Bug 1093311 for CVE-2018-2794",
"url": "https://bugzilla.suse.com/1093311"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-2794"
},
{
"cve": "CVE-2018-2795",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-2795"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u181, 7u171, 8u162 and 10; Java SE Embedded: 8u161; JRockit: R28.3.17. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-2795",
"url": "https://www.suse.com/security/cve/CVE-2018-2795"
},
{
"category": "external",
"summary": "SUSE Bug 1090025 for CVE-2018-2795",
"url": "https://bugzilla.suse.com/1090025"
},
{
"category": "external",
"summary": "SUSE Bug 1093311 for CVE-2018-2795",
"url": "https://bugzilla.suse.com/1093311"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-2795"
},
{
"cve": "CVE-2018-2796",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-2796"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Concurrency). Supported versions that are affected are Java SE: 7u171, 8u162 and 10; Java SE Embedded: 8u161; JRockit: R28.3.17. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-2796",
"url": "https://www.suse.com/security/cve/CVE-2018-2796"
},
{
"category": "external",
"summary": "SUSE Bug 1090026 for CVE-2018-2796",
"url": "https://bugzilla.suse.com/1090026"
},
{
"category": "external",
"summary": "SUSE Bug 1093311 for CVE-2018-2796",
"url": "https://bugzilla.suse.com/1093311"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-2796"
},
{
"cve": "CVE-2018-2797",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-2797"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JMX). Supported versions that are affected are Java SE: 6u181, 7u171, 8u162 and 10; Java SE Embedded: 8u161; JRockit: R28.3.17. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-2797",
"url": "https://www.suse.com/security/cve/CVE-2018-2797"
},
{
"category": "external",
"summary": "SUSE Bug 1090027 for CVE-2018-2797",
"url": "https://bugzilla.suse.com/1090027"
},
{
"category": "external",
"summary": "SUSE Bug 1093311 for CVE-2018-2797",
"url": "https://bugzilla.suse.com/1093311"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-2797"
},
{
"cve": "CVE-2018-2798",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-2798"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: AWT). Supported versions that are affected are Java SE: 6u181, 7u171, 8u162 and 10; Java SE Embedded: 8u161; JRockit: R28.3.17. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-2798",
"url": "https://www.suse.com/security/cve/CVE-2018-2798"
},
{
"category": "external",
"summary": "SUSE Bug 1090028 for CVE-2018-2798",
"url": "https://bugzilla.suse.com/1090028"
},
{
"category": "external",
"summary": "SUSE Bug 1093311 for CVE-2018-2798",
"url": "https://bugzilla.suse.com/1093311"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-2798"
},
{
"cve": "CVE-2018-2799",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-2799"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JAXP). Supported versions that are affected are Java SE: 7u171, 8u162 and 10; Java SE Embedded: 8u161; JRockit: R28.3.17. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-2799",
"url": "https://www.suse.com/security/cve/CVE-2018-2799"
},
{
"category": "external",
"summary": "SUSE Bug 1090029 for CVE-2018-2799",
"url": "https://bugzilla.suse.com/1090029"
},
{
"category": "external",
"summary": "SUSE Bug 1093311 for CVE-2018-2799",
"url": "https://bugzilla.suse.com/1093311"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-2799"
},
{
"cve": "CVE-2018-2814",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-2814"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Hotspot). Supported versions that are affected are Java SE: 6u181, 7u171, 8u162 and 10; Java SE Embedded: 8u161. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, Java SE Embedded, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 8.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-2814",
"url": "https://www.suse.com/security/cve/CVE-2018-2814"
},
{
"category": "external",
"summary": "SUSE Bug 1090032 for CVE-2018-2814",
"url": "https://bugzilla.suse.com/1090032"
},
{
"category": "external",
"summary": "SUSE Bug 1093311 for CVE-2018-2814",
"url": "https://bugzilla.suse.com/1093311"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-2814"
},
{
"cve": "CVE-2018-2825",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-2825"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Libraries). The supported version that is affected is Java SE: 10. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 8.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-2825",
"url": "https://www.suse.com/security/cve/CVE-2018-2825"
},
{
"category": "external",
"summary": "SUSE Bug 1090196 for CVE-2018-2825",
"url": "https://bugzilla.suse.com/1090196"
},
{
"category": "external",
"summary": "SUSE Bug 1093311 for CVE-2018-2825",
"url": "https://bugzilla.suse.com/1093311"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.3,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-2825"
},
{
"cve": "CVE-2018-2826",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-2826"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Libraries). The supported version that is affected is Java SE: 10. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 8.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-2826",
"url": "https://www.suse.com/security/cve/CVE-2018-2826"
},
{
"category": "external",
"summary": "SUSE Bug 1090197 for CVE-2018-2826",
"url": "https://bugzilla.suse.com/1090197"
},
{
"category": "external",
"summary": "SUSE Bug 1093311 for CVE-2018-2826",
"url": "https://bugzilla.suse.com/1093311"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.3,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-2826"
},
{
"cve": "CVE-2018-2940",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-2940"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries). Supported versions that are affected are Java SE: 6u191, 7u181, 8u172 and 10.0.1; Java SE Embedded: 8u171. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 4.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-2940",
"url": "https://www.suse.com/security/cve/CVE-2018-2940"
},
{
"category": "external",
"summary": "SUSE Bug 1101645 for CVE-2018-2940",
"url": "https://bugzilla.suse.com/1101645"
},
{
"category": "external",
"summary": "SUSE Bug 1101656 for CVE-2018-2940",
"url": "https://bugzilla.suse.com/1101656"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-2940"
},
{
"cve": "CVE-2018-2952",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-2952"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Concurrency). Supported versions that are affected are Java SE: 6u191, 7u181, 8u172 and 10.0.1; Java SE Embedded: 8u171; JRockit: R28.3.18. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 3.7 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-2952",
"url": "https://www.suse.com/security/cve/CVE-2018-2952"
},
{
"category": "external",
"summary": "SUSE Bug 1101645 for CVE-2018-2952",
"url": "https://bugzilla.suse.com/1101645"
},
{
"category": "external",
"summary": "SUSE Bug 1101651 for CVE-2018-2952",
"url": "https://bugzilla.suse.com/1101651"
},
{
"category": "external",
"summary": "SUSE Bug 1101656 for CVE-2018-2952",
"url": "https://bugzilla.suse.com/1101656"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-2952"
},
{
"cve": "CVE-2018-2972",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-2972"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Security). The supported version that is affected is Java SE: 10.0.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Java SE accessible data. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 5.9 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-2972",
"url": "https://www.suse.com/security/cve/CVE-2018-2972"
},
{
"category": "external",
"summary": "SUSE Bug 1101655 for CVE-2018-2972",
"url": "https://bugzilla.suse.com/1101655"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-2972"
},
{
"cve": "CVE-2018-2973",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-2973"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: JSSE). Supported versions that are affected are Java SE: 6u191, 7u181, 8u172 and 10.0.1; Java SE Embedded: 8u171. Difficult to exploit vulnerability allows unauthenticated attacker with network access via SSL/TLS to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 5.9 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-2973",
"url": "https://www.suse.com/security/cve/CVE-2018-2973"
},
{
"category": "external",
"summary": "SUSE Bug 1101645 for CVE-2018-2973",
"url": "https://bugzilla.suse.com/1101645"
},
{
"category": "external",
"summary": "SUSE Bug 1101656 for CVE-2018-2973",
"url": "https://bugzilla.suse.com/1101656"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-2973"
},
{
"cve": "CVE-2018-3136",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-3136"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u201, 7u191, 8u182 and 11; Java SE Embedded: 8u181. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, Java SE Embedded, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g. code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g. code installed by an administrator). CVSS 3.0 Base Score 3.4 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:L/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-3136",
"url": "https://www.suse.com/security/cve/CVE-2018-3136"
},
{
"category": "external",
"summary": "SUSE Bug 1112142 for CVE-2018-3136",
"url": "https://bugzilla.suse.com/1112142"
},
{
"category": "external",
"summary": "SUSE Bug 1112143 for CVE-2018-3136",
"url": "https://bugzilla.suse.com/1112143"
},
{
"category": "external",
"summary": "SUSE Bug 1112144 for CVE-2018-3136",
"url": "https://bugzilla.suse.com/1112144"
},
{
"category": "external",
"summary": "SUSE Bug 1112146 for CVE-2018-3136",
"url": "https://bugzilla.suse.com/1112146"
},
{
"category": "external",
"summary": "SUSE Bug 1112148 for CVE-2018-3136",
"url": "https://bugzilla.suse.com/1112148"
},
{
"category": "external",
"summary": "SUSE Bug 1112152 for CVE-2018-3136",
"url": "https://bugzilla.suse.com/1112152"
},
{
"category": "external",
"summary": "SUSE Bug 1116574 for CVE-2018-3136",
"url": "https://bugzilla.suse.com/1116574"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.1,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-3136"
},
{
"cve": "CVE-2018-3139",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-3139"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Networking). Supported versions that are affected are Java SE: 6u201, 7u191, 8u182 and 11; Java SE Embedded: 8u181. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g. code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g. code installed by an administrator). CVSS 3.0 Base Score 3.1 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-3139",
"url": "https://www.suse.com/security/cve/CVE-2018-3139"
},
{
"category": "external",
"summary": "SUSE Bug 1112142 for CVE-2018-3139",
"url": "https://bugzilla.suse.com/1112142"
},
{
"category": "external",
"summary": "SUSE Bug 1112143 for CVE-2018-3139",
"url": "https://bugzilla.suse.com/1112143"
},
{
"category": "external",
"summary": "SUSE Bug 1112144 for CVE-2018-3139",
"url": "https://bugzilla.suse.com/1112144"
},
{
"category": "external",
"summary": "SUSE Bug 1112146 for CVE-2018-3139",
"url": "https://bugzilla.suse.com/1112146"
},
{
"category": "external",
"summary": "SUSE Bug 1112148 for CVE-2018-3139",
"url": "https://bugzilla.suse.com/1112148"
},
{
"category": "external",
"summary": "SUSE Bug 1112152 for CVE-2018-3139",
"url": "https://bugzilla.suse.com/1112152"
},
{
"category": "external",
"summary": "SUSE Bug 1116574 for CVE-2018-3139",
"url": "https://bugzilla.suse.com/1116574"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.1,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-3139"
},
{
"cve": "CVE-2018-3149",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-3149"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JNDI). Supported versions that are affected are Java SE: 6u201, 7u191, 8u182 and 11; Java SE Embedded: 8u181; JRockit: R28.3.19. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, Java SE Embedded, JRockit, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE, Java SE Embedded, JRockit. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g. code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g. through a web service which supplies data to the APIs. CVSS 3.0 Base Score 8.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-3149",
"url": "https://www.suse.com/security/cve/CVE-2018-3149"
},
{
"category": "external",
"summary": "SUSE Bug 1112142 for CVE-2018-3149",
"url": "https://bugzilla.suse.com/1112142"
},
{
"category": "external",
"summary": "SUSE Bug 1112143 for CVE-2018-3149",
"url": "https://bugzilla.suse.com/1112143"
},
{
"category": "external",
"summary": "SUSE Bug 1112144 for CVE-2018-3149",
"url": "https://bugzilla.suse.com/1112144"
},
{
"category": "external",
"summary": "SUSE Bug 1112146 for CVE-2018-3149",
"url": "https://bugzilla.suse.com/1112146"
},
{
"category": "external",
"summary": "SUSE Bug 1112148 for CVE-2018-3149",
"url": "https://bugzilla.suse.com/1112148"
},
{
"category": "external",
"summary": "SUSE Bug 1112152 for CVE-2018-3149",
"url": "https://bugzilla.suse.com/1112152"
},
{
"category": "external",
"summary": "SUSE Bug 1116574 for CVE-2018-3149",
"url": "https://bugzilla.suse.com/1116574"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.3,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-3149"
},
{
"cve": "CVE-2018-3150",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-3150"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Utility). The supported version that is affected is Java SE: 11. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE accessible data. Note: This vulnerability applies to Java deployments that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 3.7 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-3150",
"url": "https://www.suse.com/security/cve/CVE-2018-3150"
},
{
"category": "external",
"summary": "SUSE Bug 1112145 for CVE-2018-3150",
"url": "https://bugzilla.suse.com/1112145"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-3150"
},
{
"cve": "CVE-2018-3157",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-3157"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Sound). The supported version that is affected is Java SE: 11. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE accessible data. Note: This vulnerability applies to Java deployments that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 3.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-3157",
"url": "https://www.suse.com/security/cve/CVE-2018-3157"
},
{
"category": "external",
"summary": "SUSE Bug 1112149 for CVE-2018-3157",
"url": "https://bugzilla.suse.com/1112149"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-3157"
},
{
"cve": "CVE-2018-3169",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-3169"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Hotspot). Supported versions that are affected are Java SE: 7u191, 8u182 and 11; Java SE Embedded: 8u181. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, Java SE Embedded, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g. code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g. code installed by an administrator). CVSS 3.0 Base Score 8.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-3169",
"url": "https://www.suse.com/security/cve/CVE-2018-3169"
},
{
"category": "external",
"summary": "SUSE Bug 1112142 for CVE-2018-3169",
"url": "https://bugzilla.suse.com/1112142"
},
{
"category": "external",
"summary": "SUSE Bug 1112143 for CVE-2018-3169",
"url": "https://bugzilla.suse.com/1112143"
},
{
"category": "external",
"summary": "SUSE Bug 1112144 for CVE-2018-3169",
"url": "https://bugzilla.suse.com/1112144"
},
{
"category": "external",
"summary": "SUSE Bug 1112146 for CVE-2018-3169",
"url": "https://bugzilla.suse.com/1112146"
},
{
"category": "external",
"summary": "SUSE Bug 1112148 for CVE-2018-3169",
"url": "https://bugzilla.suse.com/1112148"
},
{
"category": "external",
"summary": "SUSE Bug 1112152 for CVE-2018-3169",
"url": "https://bugzilla.suse.com/1112152"
},
{
"category": "external",
"summary": "SUSE Bug 1116574 for CVE-2018-3169",
"url": "https://bugzilla.suse.com/1116574"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.3,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-3169"
},
{
"cve": "CVE-2018-3180",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-3180"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JSSE). Supported versions that are affected are Java SE: 6u201, 7u191, 8u182 and 11; Java SE Embedded: 8u181; JRockit: R28.3.19. Difficult to exploit vulnerability allows unauthenticated attacker with network access via SSL/TLS to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded, JRockit accessible data as well as unauthorized read access to a subset of Java SE, Java SE Embedded, JRockit accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g. code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g. through a web service which supplies data to the APIs. CVSS 3.0 Base Score 5.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-3180",
"url": "https://www.suse.com/security/cve/CVE-2018-3180"
},
{
"category": "external",
"summary": "SUSE Bug 1112142 for CVE-2018-3180",
"url": "https://bugzilla.suse.com/1112142"
},
{
"category": "external",
"summary": "SUSE Bug 1112143 for CVE-2018-3180",
"url": "https://bugzilla.suse.com/1112143"
},
{
"category": "external",
"summary": "SUSE Bug 1112144 for CVE-2018-3180",
"url": "https://bugzilla.suse.com/1112144"
},
{
"category": "external",
"summary": "SUSE Bug 1112146 for CVE-2018-3180",
"url": "https://bugzilla.suse.com/1112146"
},
{
"category": "external",
"summary": "SUSE Bug 1112147 for CVE-2018-3180",
"url": "https://bugzilla.suse.com/1112147"
},
{
"category": "external",
"summary": "SUSE Bug 1112148 for CVE-2018-3180",
"url": "https://bugzilla.suse.com/1112148"
},
{
"category": "external",
"summary": "SUSE Bug 1112152 for CVE-2018-3180",
"url": "https://bugzilla.suse.com/1112152"
},
{
"category": "external",
"summary": "SUSE Bug 1116574 for CVE-2018-3180",
"url": "https://bugzilla.suse.com/1116574"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.6,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-3180"
},
{
"cve": "CVE-2018-3183",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-3183"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Scripting). Supported versions that are affected are Java SE: 8u182 and 11; Java SE Embedded: 8u181; JRockit: R28.3.19. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. While the vulnerability is in Java SE, Java SE Embedded, JRockit, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE, Java SE Embedded, JRockit. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g. code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g. through a web service which supplies data to the APIs. CVSS 3.0 Base Score 9.0 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-3183",
"url": "https://www.suse.com/security/cve/CVE-2018-3183"
},
{
"category": "external",
"summary": "SUSE Bug 1112142 for CVE-2018-3183",
"url": "https://bugzilla.suse.com/1112142"
},
{
"category": "external",
"summary": "SUSE Bug 1112143 for CVE-2018-3183",
"url": "https://bugzilla.suse.com/1112143"
},
{
"category": "external",
"summary": "SUSE Bug 1112144 for CVE-2018-3183",
"url": "https://bugzilla.suse.com/1112144"
},
{
"category": "external",
"summary": "SUSE Bug 1112146 for CVE-2018-3183",
"url": "https://bugzilla.suse.com/1112146"
},
{
"category": "external",
"summary": "SUSE Bug 1112148 for CVE-2018-3183",
"url": "https://bugzilla.suse.com/1112148"
},
{
"category": "external",
"summary": "SUSE Bug 1112152 for CVE-2018-3183",
"url": "https://bugzilla.suse.com/1112152"
},
{
"category": "external",
"summary": "SUSE Bug 1116574 for CVE-2018-3183",
"url": "https://bugzilla.suse.com/1116574"
},
{
"category": "external",
"summary": "SUSE Bug 1120714 for CVE-2018-3183",
"url": "https://bugzilla.suse.com/1120714"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2018-3183"
},
{
"cve": "CVE-2019-2422",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-2422"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Libraries). Supported versions that are affected are Java SE: 7u201, 8u192 and 11.0.1; Java SE Embedded: 8u191. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 3.1 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-2422",
"url": "https://www.suse.com/security/cve/CVE-2019-2422"
},
{
"category": "external",
"summary": "SUSE Bug 1122293 for CVE-2019-2422",
"url": "https://bugzilla.suse.com/1122293"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.1,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-2422"
},
{
"cve": "CVE-2019-2426",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-2426"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Networking). Supported versions that are affected are Java SE: 7u201, 8u192 and 11.0.1; Java SE Embedded: 8u191. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 3.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-2426",
"url": "https://www.suse.com/security/cve/CVE-2019-2426"
},
{
"category": "external",
"summary": "SUSE Bug 1134297 for CVE-2019-2426",
"url": "https://bugzilla.suse.com/1134297"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-2426"
},
{
"cve": "CVE-2019-2602",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-2602"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries). Supported versions that are affected are Java SE: 7u211, 8u202, 11.0.2 and 12; Java SE Embedded: 8u201. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Java SE, Java SE Embedded. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.0 Base Score 7.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-2602",
"url": "https://www.suse.com/security/cve/CVE-2019-2602"
},
{
"category": "external",
"summary": "SUSE Bug 1132728 for CVE-2019-2602",
"url": "https://bugzilla.suse.com/1132728"
},
{
"category": "external",
"summary": "SUSE Bug 1134718 for CVE-2019-2602",
"url": "https://bugzilla.suse.com/1134718"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-2602"
},
{
"cve": "CVE-2019-2684",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-2684"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: RMI). Supported versions that are affected are Java SE: 7u211, 8u202, 11.0.2 and 12; Java SE Embedded: 8u201. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 5.9 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-2684",
"url": "https://www.suse.com/security/cve/CVE-2019-2684"
},
{
"category": "external",
"summary": "SUSE Bug 1132732 for CVE-2019-2684",
"url": "https://bugzilla.suse.com/1132732"
},
{
"category": "external",
"summary": "SUSE Bug 1134718 for CVE-2019-2684",
"url": "https://bugzilla.suse.com/1134718"
},
{
"category": "external",
"summary": "SUSE Bug 1184734 for CVE-2019-2684",
"url": "https://bugzilla.suse.com/1184734"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-2684"
},
{
"cve": "CVE-2019-2745",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-2745"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 7u221, 8u212 and 11.0.3. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Java SE executes to compromise Java SE. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Java SE accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 5.1 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-2745",
"url": "https://www.suse.com/security/cve/CVE-2019-2745"
},
{
"category": "external",
"summary": "SUSE Bug 1141784 for CVE-2019-2745",
"url": "https://bugzilla.suse.com/1141784"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-2745"
},
{
"cve": "CVE-2019-2762",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-2762"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Utilities). Supported versions that are affected are Java SE: 7u221, 8u212, 11.0.3 and 12.0.1; Java SE Embedded: 8u211. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-2762",
"url": "https://www.suse.com/security/cve/CVE-2019-2762"
},
{
"category": "external",
"summary": "SUSE Bug 1141782 for CVE-2019-2762",
"url": "https://bugzilla.suse.com/1141782"
},
{
"category": "external",
"summary": "SUSE Bug 1147021 for CVE-2019-2762",
"url": "https://bugzilla.suse.com/1147021"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-2762"
},
{
"cve": "CVE-2019-2766",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-2766"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Networking). Supported versions that are affected are Java SE: 7u221, 8u212, 11.0.3 and 12.0.1; Java SE Embedded: 8u211. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 3.1 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-2766",
"url": "https://www.suse.com/security/cve/CVE-2019-2766"
},
{
"category": "external",
"summary": "SUSE Bug 1141789 for CVE-2019-2766",
"url": "https://bugzilla.suse.com/1141789"
},
{
"category": "external",
"summary": "SUSE Bug 1147021 for CVE-2019-2766",
"url": "https://bugzilla.suse.com/1147021"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.1,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-2766"
},
{
"cve": "CVE-2019-2769",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-2769"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Utilities). Supported versions that are affected are Java SE: 7u221, 8u212, 11.0.3 and 12.0.1; Java SE Embedded: 8u211. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-2769",
"url": "https://www.suse.com/security/cve/CVE-2019-2769"
},
{
"category": "external",
"summary": "SUSE Bug 1141783 for CVE-2019-2769",
"url": "https://bugzilla.suse.com/1141783"
},
{
"category": "external",
"summary": "SUSE Bug 1147021 for CVE-2019-2769",
"url": "https://bugzilla.suse.com/1147021"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-2769"
},
{
"cve": "CVE-2019-2786",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-2786"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 8u212, 11.0.3 and 12.0.1; Java SE Embedded: 8u211. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, Java SE Embedded, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 3.4 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-2786",
"url": "https://www.suse.com/security/cve/CVE-2019-2786"
},
{
"category": "external",
"summary": "SUSE Bug 1141787 for CVE-2019-2786",
"url": "https://bugzilla.suse.com/1141787"
},
{
"category": "external",
"summary": "SUSE Bug 1147021 for CVE-2019-2786",
"url": "https://bugzilla.suse.com/1147021"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.1,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-2786"
},
{
"cve": "CVE-2019-2816",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-2816"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Networking). Supported versions that are affected are Java SE: 7u221, 8u212, 11.0.3 and 12.0.1; Java SE Embedded: 8u211. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded accessible data as well as unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 4.8 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-2816",
"url": "https://www.suse.com/security/cve/CVE-2019-2816"
},
{
"category": "external",
"summary": "SUSE Bug 1141785 for CVE-2019-2816",
"url": "https://bugzilla.suse.com/1141785"
},
{
"category": "external",
"summary": "SUSE Bug 1147021 for CVE-2019-2816",
"url": "https://bugzilla.suse.com/1147021"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.8,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-2816"
},
{
"cve": "CVE-2019-2818",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-2818"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 11.0.3 and 12.0.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 3.1 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-2818",
"url": "https://www.suse.com/security/cve/CVE-2019-2818"
},
{
"category": "external",
"summary": "SUSE Bug 1141788 for CVE-2019-2818",
"url": "https://bugzilla.suse.com/1141788"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.1,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-2818"
},
{
"cve": "CVE-2019-2821",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-2821"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE component of Oracle Java SE (subcomponent: JSSE). Supported versions that are affected are Java SE: 11.0.3 and 12.0.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via TLS to compromise Java SE. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Java SE accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-2821",
"url": "https://www.suse.com/security/cve/CVE-2019-2821"
},
{
"category": "external",
"summary": "SUSE Bug 1141781 for CVE-2019-2821",
"url": "https://bugzilla.suse.com/1141781"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-2821"
},
{
"cve": "CVE-2019-2894",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-2894"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Security). Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13; Java SE Embedded: 8u221. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 3.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-2894",
"url": "https://www.suse.com/security/cve/CVE-2019-2894"
},
{
"category": "external",
"summary": "SUSE Bug 1152856 for CVE-2019-2894",
"url": "https://bugzilla.suse.com/1152856"
},
{
"category": "external",
"summary": "SUSE Bug 1154212 for CVE-2019-2894",
"url": "https://bugzilla.suse.com/1154212"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-2894"
},
{
"cve": "CVE-2019-2933",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-2933"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13; Java SE Embedded: 8u221. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 3.1 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-2933",
"url": "https://www.suse.com/security/cve/CVE-2019-2933"
},
{
"category": "external",
"summary": "SUSE Bug 1154212 for CVE-2019-2933",
"url": "https://bugzilla.suse.com/1154212"
},
{
"category": "external",
"summary": "SUSE Bug 1158442 for CVE-2019-2933",
"url": "https://bugzilla.suse.com/1158442"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.1,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-2933"
},
{
"cve": "CVE-2019-2945",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-2945"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Networking). Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13; Java SE Embedded: 8u221. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 3.1 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-2945",
"url": "https://www.suse.com/security/cve/CVE-2019-2945"
},
{
"category": "external",
"summary": "SUSE Bug 1154212 for CVE-2019-2945",
"url": "https://bugzilla.suse.com/1154212"
},
{
"category": "external",
"summary": "SUSE Bug 1158442 for CVE-2019-2945",
"url": "https://bugzilla.suse.com/1158442"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.1,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-2945"
},
{
"cve": "CVE-2019-2949",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-2949"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Kerberos). Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13; Java SE Embedded: 8u221. Difficult to exploit vulnerability allows unauthenticated attacker with network access via Kerberos to compromise Java SE, Java SE Embedded. While the vulnerability is in Java SE, Java SE Embedded, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 6.8 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-2949",
"url": "https://www.suse.com/security/cve/CVE-2019-2949"
},
{
"category": "external",
"summary": "SUSE Bug 1154212 for CVE-2019-2949",
"url": "https://bugzilla.suse.com/1154212"
},
{
"category": "external",
"summary": "SUSE Bug 1172277 for CVE-2019-2949",
"url": "https://bugzilla.suse.com/1172277"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.8,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-2949"
},
{
"cve": "CVE-2019-2958",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-2958"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13; Java SE Embedded: 8u221. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 5.9 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-2958",
"url": "https://www.suse.com/security/cve/CVE-2019-2958"
},
{
"category": "external",
"summary": "SUSE Bug 1154212 for CVE-2019-2958",
"url": "https://bugzilla.suse.com/1154212"
},
{
"category": "external",
"summary": "SUSE Bug 1158442 for CVE-2019-2958",
"url": "https://bugzilla.suse.com/1158442"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-2958"
},
{
"cve": "CVE-2019-2962",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-2962"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: 2D). Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13; Java SE Embedded: 8u221. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 3.7 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-2962",
"url": "https://www.suse.com/security/cve/CVE-2019-2962"
},
{
"category": "external",
"summary": "SUSE Bug 1154212 for CVE-2019-2962",
"url": "https://bugzilla.suse.com/1154212"
},
{
"category": "external",
"summary": "SUSE Bug 1158442 for CVE-2019-2962",
"url": "https://bugzilla.suse.com/1158442"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-2962"
},
{
"cve": "CVE-2019-2964",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-2964"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Concurrency). Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13; Java SE Embedded: 8u221. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.0 Base Score 3.7 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-2964",
"url": "https://www.suse.com/security/cve/CVE-2019-2964"
},
{
"category": "external",
"summary": "SUSE Bug 1154212 for CVE-2019-2964",
"url": "https://bugzilla.suse.com/1154212"
},
{
"category": "external",
"summary": "SUSE Bug 1158442 for CVE-2019-2964",
"url": "https://bugzilla.suse.com/1158442"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-2964"
},
{
"cve": "CVE-2019-2973",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-2973"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JAXP). Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13; Java SE Embedded: 8u221. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 3.7 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-2973",
"url": "https://www.suse.com/security/cve/CVE-2019-2973"
},
{
"category": "external",
"summary": "SUSE Bug 1154212 for CVE-2019-2973",
"url": "https://bugzilla.suse.com/1154212"
},
{
"category": "external",
"summary": "SUSE Bug 1158442 for CVE-2019-2973",
"url": "https://bugzilla.suse.com/1158442"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-2973"
},
{
"cve": "CVE-2019-2975",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-2975"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Scripting). Supported versions that are affected are Java SE: 8u221, 11.0.4 and 13; Java SE Embedded: 8u221. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 4.8 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-2975",
"url": "https://www.suse.com/security/cve/CVE-2019-2975"
},
{
"category": "external",
"summary": "SUSE Bug 1154212 for CVE-2019-2975",
"url": "https://bugzilla.suse.com/1154212"
},
{
"category": "external",
"summary": "SUSE Bug 1158442 for CVE-2019-2975",
"url": "https://bugzilla.suse.com/1158442"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.8,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-2975"
},
{
"cve": "CVE-2019-2977",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-2977"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE product of Oracle Java SE (component: Hotspot). Supported versions that are affected are Java SE: 11.0.4 and 13. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Java SE. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 4.8 (Confidentiality and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-2977",
"url": "https://www.suse.com/security/cve/CVE-2019-2977"
},
{
"category": "external",
"summary": "SUSE Bug 1154212 for CVE-2019-2977",
"url": "https://bugzilla.suse.com/1154212"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-2977"
},
{
"cve": "CVE-2019-2978",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-2978"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Networking). Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13; Java SE Embedded: 8u221. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 3.7 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-2978",
"url": "https://www.suse.com/security/cve/CVE-2019-2978"
},
{
"category": "external",
"summary": "SUSE Bug 1154212 for CVE-2019-2978",
"url": "https://bugzilla.suse.com/1154212"
},
{
"category": "external",
"summary": "SUSE Bug 1158442 for CVE-2019-2978",
"url": "https://bugzilla.suse.com/1158442"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-2978"
},
{
"cve": "CVE-2019-2981",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-2981"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JAXP). Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13; Java SE Embedded: 8u221. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 3.7 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-2981",
"url": "https://www.suse.com/security/cve/CVE-2019-2981"
},
{
"category": "external",
"summary": "SUSE Bug 1154212 for CVE-2019-2981",
"url": "https://bugzilla.suse.com/1154212"
},
{
"category": "external",
"summary": "SUSE Bug 1158442 for CVE-2019-2981",
"url": "https://bugzilla.suse.com/1158442"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-2981"
},
{
"cve": "CVE-2019-2983",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-2983"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Serialization). Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13; Java SE Embedded: 8u221. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 3.7 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-2983",
"url": "https://www.suse.com/security/cve/CVE-2019-2983"
},
{
"category": "external",
"summary": "SUSE Bug 1154212 for CVE-2019-2983",
"url": "https://bugzilla.suse.com/1154212"
},
{
"category": "external",
"summary": "SUSE Bug 1158442 for CVE-2019-2983",
"url": "https://bugzilla.suse.com/1158442"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-2983"
},
{
"cve": "CVE-2019-2987",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-2987"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE product of Oracle Java SE (component: 2D). Supported versions that are affected are Java SE: 11.0.4 and 13. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 3.7 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-2987",
"url": "https://www.suse.com/security/cve/CVE-2019-2987"
},
{
"category": "external",
"summary": "SUSE Bug 1154212 for CVE-2019-2987",
"url": "https://bugzilla.suse.com/1154212"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-2987"
},
{
"cve": "CVE-2019-2988",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-2988"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: 2D). Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13; Java SE Embedded: 8u221. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 3.7 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-2988",
"url": "https://www.suse.com/security/cve/CVE-2019-2988"
},
{
"category": "external",
"summary": "SUSE Bug 1154212 for CVE-2019-2988",
"url": "https://bugzilla.suse.com/1154212"
},
{
"category": "external",
"summary": "SUSE Bug 1158442 for CVE-2019-2988",
"url": "https://bugzilla.suse.com/1158442"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-2988"
},
{
"cve": "CVE-2019-2989",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-2989"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Networking). Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13; Java SE Embedded: 8u221. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. While the vulnerability is in Java SE, Java SE Embedded, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS v3.0 Base Score 6.8 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-2989",
"url": "https://www.suse.com/security/cve/CVE-2019-2989"
},
{
"category": "external",
"summary": "SUSE Bug 1154212 for CVE-2019-2989",
"url": "https://bugzilla.suse.com/1154212"
},
{
"category": "external",
"summary": "SUSE Bug 1158442 for CVE-2019-2989",
"url": "https://bugzilla.suse.com/1158442"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-2989"
},
{
"cve": "CVE-2019-2992",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-2992"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: 2D). Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13; Java SE Embedded: 8u221. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 3.7 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-2992",
"url": "https://www.suse.com/security/cve/CVE-2019-2992"
},
{
"category": "external",
"summary": "SUSE Bug 1154212 for CVE-2019-2992",
"url": "https://bugzilla.suse.com/1154212"
},
{
"category": "external",
"summary": "SUSE Bug 1158442 for CVE-2019-2992",
"url": "https://bugzilla.suse.com/1158442"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-2992"
},
{
"cve": "CVE-2019-2999",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-2999"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE product of Oracle Java SE (component: Javadoc). Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE accessible data as well as unauthorized read access to a subset of Java SE accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 4.7 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-2999",
"url": "https://www.suse.com/security/cve/CVE-2019-2999"
},
{
"category": "external",
"summary": "SUSE Bug 1154212 for CVE-2019-2999",
"url": "https://bugzilla.suse.com/1154212"
},
{
"category": "external",
"summary": "SUSE Bug 1158442 for CVE-2019-2999",
"url": "https://bugzilla.suse.com/1158442"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-2999"
},
{
"cve": "CVE-2019-7317",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-7317"
}
],
"notes": [
{
"category": "general",
"text": "png_image_free in png.c in libpng 1.6.x before 1.6.37 has a use-after-free because png_image_free_function is called under png_safe_execute.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-7317",
"url": "https://www.suse.com/security/cve/CVE-2019-7317"
},
{
"category": "external",
"summary": "SUSE Bug 1124211 for CVE-2019-7317",
"url": "https://bugzilla.suse.com/1124211"
},
{
"category": "external",
"summary": "SUSE Bug 1135824 for CVE-2019-7317",
"url": "https://bugzilla.suse.com/1135824"
},
{
"category": "external",
"summary": "SUSE Bug 1141780 for CVE-2019-7317",
"url": "https://bugzilla.suse.com/1141780"
},
{
"category": "external",
"summary": "SUSE Bug 1147021 for CVE-2019-7317",
"url": "https://bugzilla.suse.com/1147021"
},
{
"category": "external",
"summary": "SUSE Bug 1165297 for CVE-2019-7317",
"url": "https://bugzilla.suse.com/1165297"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-7317"
},
{
"cve": "CVE-2020-14556",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-14556"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 8u251, 11.0.7 and 14.0.1; Java SE Embedded: 8u251. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded accessible data as well as unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.1 Base Score 4.8 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-14556",
"url": "https://www.suse.com/security/cve/CVE-2020-14556"
},
{
"category": "external",
"summary": "SUSE Bug 1174157 for CVE-2020-14556",
"url": "https://bugzilla.suse.com/1174157"
},
{
"category": "external",
"summary": "SUSE Bug 1175259 for CVE-2020-14556",
"url": "https://bugzilla.suse.com/1175259"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.8,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-14556"
},
{
"cve": "CVE-2020-14562",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-14562"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE product of Oracle Java SE (component: ImageIO). Supported versions that are affected are Java SE: 11.0.7 and 14.0.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-14562",
"url": "https://www.suse.com/security/cve/CVE-2020-14562"
},
{
"category": "external",
"summary": "SUSE Bug 1174157 for CVE-2020-14562",
"url": "https://bugzilla.suse.com/1174157"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-14562"
},
{
"cve": "CVE-2020-14573",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-14573"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE product of Oracle Java SE (component: Hotspot). Supported versions that are affected are Java SE: 11.0.7 and 14.0.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE accessible data. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.1 Base Score 3.7 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-14573",
"url": "https://www.suse.com/security/cve/CVE-2020-14573"
},
{
"category": "external",
"summary": "SUSE Bug 1174157 for CVE-2020-14573",
"url": "https://bugzilla.suse.com/1174157"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-14573"
},
{
"cve": "CVE-2020-14577",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-14577"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JSSE). Supported versions that are affected are Java SE: 7u261, 8u251, 11.0.7 and 14.0.1; Java SE Embedded: 8u251. Difficult to exploit vulnerability allows unauthenticated attacker with network access via TLS to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.1 Base Score 3.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-14577",
"url": "https://www.suse.com/security/cve/CVE-2020-14577"
},
{
"category": "external",
"summary": "SUSE Bug 1174157 for CVE-2020-14577",
"url": "https://bugzilla.suse.com/1174157"
},
{
"category": "external",
"summary": "SUSE Bug 1175259 for CVE-2020-14577",
"url": "https://bugzilla.suse.com/1175259"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-14577"
},
{
"cve": "CVE-2020-14581",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-14581"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: 2D). Supported versions that are affected are Java SE: 8u251, 11.0.7 and 14.0.1; Java SE Embedded: 8u251. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.1 Base Score 3.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-14581",
"url": "https://www.suse.com/security/cve/CVE-2020-14581"
},
{
"category": "external",
"summary": "SUSE Bug 1174157 for CVE-2020-14581",
"url": "https://bugzilla.suse.com/1174157"
},
{
"category": "external",
"summary": "SUSE Bug 1175259 for CVE-2020-14581",
"url": "https://bugzilla.suse.com/1175259"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-14581"
},
{
"cve": "CVE-2020-14583",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-14583"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u261, 8u251, 11.0.7 and 14.0.1; Java SE Embedded: 8u251. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, Java SE Embedded, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 8.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-14583",
"url": "https://www.suse.com/security/cve/CVE-2020-14583"
},
{
"category": "external",
"summary": "SUSE Bug 1174157 for CVE-2020-14583",
"url": "https://bugzilla.suse.com/1174157"
},
{
"category": "external",
"summary": "SUSE Bug 1175259 for CVE-2020-14583",
"url": "https://bugzilla.suse.com/1175259"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.3,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-14583"
},
{
"cve": "CVE-2020-14593",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-14593"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: 2D). Supported versions that are affected are Java SE: 7u261, 8u251, 11.0.7 and 14.0.1; Java SE Embedded: 8u251. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, Java SE Embedded, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 7.4 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-14593",
"url": "https://www.suse.com/security/cve/CVE-2020-14593"
},
{
"category": "external",
"summary": "SUSE Bug 1174157 for CVE-2020-14593",
"url": "https://bugzilla.suse.com/1174157"
},
{
"category": "external",
"summary": "SUSE Bug 1175259 for CVE-2020-14593",
"url": "https://bugzilla.suse.com/1175259"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.4,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-14593"
},
{
"cve": "CVE-2020-14621",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-14621"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JAXP). Supported versions that are affected are Java SE: 7u261, 8u251, 11.0.7 and 14.0.1; Java SE Embedded: 8u251. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 5.3 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-14621",
"url": "https://www.suse.com/security/cve/CVE-2020-14621"
},
{
"category": "external",
"summary": "SUSE Bug 1174157 for CVE-2020-14621",
"url": "https://bugzilla.suse.com/1174157"
},
{
"category": "external",
"summary": "SUSE Bug 1175259 for CVE-2020-14621",
"url": "https://bugzilla.suse.com/1175259"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-14621"
},
{
"cve": "CVE-2020-14779",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-14779"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Serialization). Supported versions that are affected are Java SE: 7u271, 8u261, 11.0.8 and 15; Java SE Embedded: 8u261. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.1 Base Score 3.7 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-14779",
"url": "https://www.suse.com/security/cve/CVE-2020-14779"
},
{
"category": "external",
"summary": "SUSE Bug 1177943 for CVE-2020-14779",
"url": "https://bugzilla.suse.com/1177943"
},
{
"category": "external",
"summary": "SUSE Bug 1180063 for CVE-2020-14779",
"url": "https://bugzilla.suse.com/1180063"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2020-14779"
},
{
"cve": "CVE-2020-14781",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-14781"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JNDI). Supported versions that are affected are Java SE: 7u271, 8u261, 11.0.8 and 15; Java SE Embedded: 8u261. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.1 Base Score 3.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-14781",
"url": "https://www.suse.com/security/cve/CVE-2020-14781"
},
{
"category": "external",
"summary": "SUSE Bug 1177943 for CVE-2020-14781",
"url": "https://bugzilla.suse.com/1177943"
},
{
"category": "external",
"summary": "SUSE Bug 1180063 for CVE-2020-14781",
"url": "https://bugzilla.suse.com/1180063"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2020-14781"
},
{
"cve": "CVE-2020-14782",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-14782"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u271, 8u261, 11.0.8 and 15; Java SE Embedded: 8u261. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded accessible data. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.1 Base Score 3.7 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-14782",
"url": "https://www.suse.com/security/cve/CVE-2020-14782"
},
{
"category": "external",
"summary": "SUSE Bug 1177943 for CVE-2020-14782",
"url": "https://bugzilla.suse.com/1177943"
},
{
"category": "external",
"summary": "SUSE Bug 1180063 for CVE-2020-14782",
"url": "https://bugzilla.suse.com/1180063"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2020-14782"
},
{
"cve": "CVE-2020-14792",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-14792"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Hotspot). Supported versions that are affected are Java SE: 7u271, 8u261, 11.0.8 and 15; Java SE Embedded: 8u261. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded accessible data as well as unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.1 Base Score 4.2 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-14792",
"url": "https://www.suse.com/security/cve/CVE-2020-14792"
},
{
"category": "external",
"summary": "SUSE Bug 1177943 for CVE-2020-14792",
"url": "https://bugzilla.suse.com/1177943"
},
{
"category": "external",
"summary": "SUSE Bug 1180063 for CVE-2020-14792",
"url": "https://bugzilla.suse.com/1180063"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.2,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2020-14792"
},
{
"cve": "CVE-2020-14796",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-14796"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u271, 8u261, 11.0.8 and 15; Java SE Embedded: 8u261. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 3.1 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-14796",
"url": "https://www.suse.com/security/cve/CVE-2020-14796"
},
{
"category": "external",
"summary": "SUSE Bug 1177943 for CVE-2020-14796",
"url": "https://bugzilla.suse.com/1177943"
},
{
"category": "external",
"summary": "SUSE Bug 1180063 for CVE-2020-14796",
"url": "https://bugzilla.suse.com/1180063"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.1,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2020-14796"
},
{
"cve": "CVE-2020-14797",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-14797"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u271, 8u261, 11.0.8 and 15; Java SE Embedded: 8u261. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded accessible data. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.1 Base Score 3.7 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-14797",
"url": "https://www.suse.com/security/cve/CVE-2020-14797"
},
{
"category": "external",
"summary": "SUSE Bug 1177943 for CVE-2020-14797",
"url": "https://bugzilla.suse.com/1177943"
},
{
"category": "external",
"summary": "SUSE Bug 1180063 for CVE-2020-14797",
"url": "https://bugzilla.suse.com/1180063"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2020-14797"
},
{
"cve": "CVE-2020-14798",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-14798"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u271, 8u261, 11.0.8 and 15; Java SE Embedded: 8u261. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 3.1 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-14798",
"url": "https://www.suse.com/security/cve/CVE-2020-14798"
},
{
"category": "external",
"summary": "SUSE Bug 1177943 for CVE-2020-14798",
"url": "https://bugzilla.suse.com/1177943"
},
{
"category": "external",
"summary": "SUSE Bug 1180063 for CVE-2020-14798",
"url": "https://bugzilla.suse.com/1180063"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2020-14798"
},
{
"cve": "CVE-2020-14803",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-14803"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 11.0.8 and 15. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-14803",
"url": "https://www.suse.com/security/cve/CVE-2020-14803"
},
{
"category": "external",
"summary": "SUSE Bug 1177943 for CVE-2020-14803",
"url": "https://bugzilla.suse.com/1177943"
},
{
"category": "external",
"summary": "SUSE Bug 1181239 for CVE-2020-14803",
"url": "https://bugzilla.suse.com/1181239"
},
{
"category": "external",
"summary": "SUSE Bug 1182186 for CVE-2020-14803",
"url": "https://bugzilla.suse.com/1182186"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2020-14803"
},
{
"cve": "CVE-2020-2583",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-2583"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Serialization). Supported versions that are affected are Java SE: 7u241, 8u231, 11.0.5 and 13.0.1; Java SE Embedded: 8u231. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 3.7 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-2583",
"url": "https://www.suse.com/security/cve/CVE-2020-2583"
},
{
"category": "external",
"summary": "SUSE Bug 1160968 for CVE-2020-2583",
"url": "https://bugzilla.suse.com/1160968"
},
{
"category": "external",
"summary": "SUSE Bug 1162972 for CVE-2020-2583",
"url": "https://bugzilla.suse.com/1162972"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2020-2583"
},
{
"cve": "CVE-2020-2590",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-2590"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Security). Supported versions that are affected are Java SE: 7u241, 8u231, 11.0.5 and 13.0.1; Java SE Embedded: 8u231. Difficult to exploit vulnerability allows unauthenticated attacker with network access via Kerberos to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 3.7 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-2590",
"url": "https://www.suse.com/security/cve/CVE-2020-2590"
},
{
"category": "external",
"summary": "SUSE Bug 1160968 for CVE-2020-2590",
"url": "https://bugzilla.suse.com/1160968"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2020-2590"
},
{
"cve": "CVE-2020-2593",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-2593"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Networking). Supported versions that are affected are Java SE: 7u241, 8u231, 11.0.5 and 13.0.1; Java SE Embedded: 8u231. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded accessible data as well as unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 4.8 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-2593",
"url": "https://www.suse.com/security/cve/CVE-2020-2593"
},
{
"category": "external",
"summary": "SUSE Bug 1160968 for CVE-2020-2593",
"url": "https://bugzilla.suse.com/1160968"
},
{
"category": "external",
"summary": "SUSE Bug 1162972 for CVE-2020-2593",
"url": "https://bugzilla.suse.com/1162972"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.8,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2020-2593"
},
{
"cve": "CVE-2020-2601",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-2601"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Security). Supported versions that are affected are Java SE: 7u241, 8u231, 11.0.5 and 13.0.1; Java SE Embedded: 8u231. Difficult to exploit vulnerability allows unauthenticated attacker with network access via Kerberos to compromise Java SE, Java SE Embedded. While the vulnerability is in Java SE, Java SE Embedded, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 6.8 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-2601",
"url": "https://www.suse.com/security/cve/CVE-2020-2601"
},
{
"category": "external",
"summary": "SUSE Bug 1160968 for CVE-2020-2601",
"url": "https://bugzilla.suse.com/1160968"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.8,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2020-2601"
},
{
"cve": "CVE-2020-2604",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-2604"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Serialization). Supported versions that are affected are Java SE: 7u241, 8u231, 11.0.5 and 13.0.1; Java SE Embedded: 8u231. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in takeover of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS v3.0 Base Score 8.1 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-2604",
"url": "https://www.suse.com/security/cve/CVE-2020-2604"
},
{
"category": "external",
"summary": "SUSE Bug 1160968 for CVE-2020-2604",
"url": "https://bugzilla.suse.com/1160968"
},
{
"category": "external",
"summary": "SUSE Bug 1162972 for CVE-2020-2604",
"url": "https://bugzilla.suse.com/1162972"
},
{
"category": "external",
"summary": "SUSE Bug 1165863 for CVE-2020-2604",
"url": "https://bugzilla.suse.com/1165863"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-2604"
},
{
"cve": "CVE-2020-2654",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-2654"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u241, 8u231, 11.0.5 and 13.0.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.0 Base Score 3.7 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-2654",
"url": "https://www.suse.com/security/cve/CVE-2020-2654"
},
{
"category": "external",
"summary": "SUSE Bug 1160968 for CVE-2020-2654",
"url": "https://bugzilla.suse.com/1160968"
},
{
"category": "external",
"summary": "SUSE Bug 1172277 for CVE-2020-2654",
"url": "https://bugzilla.suse.com/1172277"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2020-2654"
},
{
"cve": "CVE-2020-2655",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-2655"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE product of Oracle Java SE (component: JSSE). Supported versions that are affected are Java SE: 11.0.5 and 13.0.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Java SE. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE accessible data as well as unauthorized read access to a subset of Java SE accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 4.8 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-2655",
"url": "https://www.suse.com/security/cve/CVE-2020-2655"
},
{
"category": "external",
"summary": "SUSE Bug 1160968 for CVE-2020-2655",
"url": "https://bugzilla.suse.com/1160968"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.8,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2020-2655"
},
{
"cve": "CVE-2020-2754",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-2754"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Scripting). Supported versions that are affected are Java SE: 8u241, 11.0.6 and 14; Java SE Embedded: 8u241. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 3.7 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-2754",
"url": "https://www.suse.com/security/cve/CVE-2020-2754"
},
{
"category": "external",
"summary": "SUSE Bug 1169511 for CVE-2020-2754",
"url": "https://bugzilla.suse.com/1169511"
},
{
"category": "external",
"summary": "SUSE Bug 1172277 for CVE-2020-2754",
"url": "https://bugzilla.suse.com/1172277"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-2754"
},
{
"cve": "CVE-2020-2755",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-2755"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Scripting). Supported versions that are affected are Java SE: 8u241, 11.0.6 and 14; Java SE Embedded: 8u241. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 3.7 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-2755",
"url": "https://www.suse.com/security/cve/CVE-2020-2755"
},
{
"category": "external",
"summary": "SUSE Bug 1169511 for CVE-2020-2755",
"url": "https://bugzilla.suse.com/1169511"
},
{
"category": "external",
"summary": "SUSE Bug 1172277 for CVE-2020-2755",
"url": "https://bugzilla.suse.com/1172277"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-2755"
},
{
"cve": "CVE-2020-2756",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-2756"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Serialization). Supported versions that are affected are Java SE: 7u251, 8u241, 11.0.6 and 14; Java SE Embedded: 8u241. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 3.7 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-2756",
"url": "https://www.suse.com/security/cve/CVE-2020-2756"
},
{
"category": "external",
"summary": "SUSE Bug 1169511 for CVE-2020-2756",
"url": "https://bugzilla.suse.com/1169511"
},
{
"category": "external",
"summary": "SUSE Bug 1172277 for CVE-2020-2756",
"url": "https://bugzilla.suse.com/1172277"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-2756"
},
{
"cve": "CVE-2020-2757",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-2757"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Serialization). Supported versions that are affected are Java SE: 7u251, 8u241, 11.0.6 and 14; Java SE Embedded: 8u241. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 3.7 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-2757",
"url": "https://www.suse.com/security/cve/CVE-2020-2757"
},
{
"category": "external",
"summary": "SUSE Bug 1169511 for CVE-2020-2757",
"url": "https://bugzilla.suse.com/1169511"
},
{
"category": "external",
"summary": "SUSE Bug 1172277 for CVE-2020-2757",
"url": "https://bugzilla.suse.com/1172277"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-2757"
},
{
"cve": "CVE-2020-2767",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-2767"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE product of Oracle Java SE (component: JSSE). Supported versions that are affected are Java SE: 11.0.6 and 14. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Java SE. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE accessible data as well as unauthorized read access to a subset of Java SE accessible data. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 4.8 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-2767",
"url": "https://www.suse.com/security/cve/CVE-2020-2767"
},
{
"category": "external",
"summary": "SUSE Bug 1169511 for CVE-2020-2767",
"url": "https://bugzilla.suse.com/1169511"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.8,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-2767"
},
{
"cve": "CVE-2020-2773",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-2773"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Security). Supported versions that are affected are Java SE: 7u251, 8u241, 11.0.6 and 14; Java SE Embedded: 8u241. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 3.7 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-2773",
"url": "https://www.suse.com/security/cve/CVE-2020-2773"
},
{
"category": "external",
"summary": "SUSE Bug 1169511 for CVE-2020-2773",
"url": "https://bugzilla.suse.com/1169511"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-2773"
},
{
"cve": "CVE-2020-2778",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-2778"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE product of Oracle Java SE (component: JSSE). Supported versions that are affected are Java SE: 11.0.6 and 14. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Java SE. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE accessible data. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 3.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-2778",
"url": "https://www.suse.com/security/cve/CVE-2020-2778"
},
{
"category": "external",
"summary": "SUSE Bug 1169511 for CVE-2020-2778",
"url": "https://bugzilla.suse.com/1169511"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-2778"
},
{
"cve": "CVE-2020-2781",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-2781"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JSSE). Supported versions that are affected are Java SE: 7u251, 8u241, 11.0.6 and 14; Java SE Embedded: 8u241. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-2781",
"url": "https://www.suse.com/security/cve/CVE-2020-2781"
},
{
"category": "external",
"summary": "SUSE Bug 1169511 for CVE-2020-2781",
"url": "https://bugzilla.suse.com/1169511"
},
{
"category": "external",
"summary": "SUSE Bug 1172277 for CVE-2020-2781",
"url": "https://bugzilla.suse.com/1172277"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-2781"
},
{
"cve": "CVE-2020-2800",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-2800"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Lightweight HTTP Server). Supported versions that are affected are Java SE: 7u251, 8u241, 11.0.6 and 14; Java SE Embedded: 8u241. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded accessible data as well as unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.0 Base Score 4.8 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-2800",
"url": "https://www.suse.com/security/cve/CVE-2020-2800"
},
{
"category": "external",
"summary": "SUSE Bug 1169511 for CVE-2020-2800",
"url": "https://bugzilla.suse.com/1169511"
},
{
"category": "external",
"summary": "SUSE Bug 1172277 for CVE-2020-2800",
"url": "https://bugzilla.suse.com/1172277"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.8,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-2800"
},
{
"cve": "CVE-2020-2803",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-2803"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u251, 8u241, 11.0.6 and 14; Java SE Embedded: 8u241. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, Java SE Embedded, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 8.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-2803",
"url": "https://www.suse.com/security/cve/CVE-2020-2803"
},
{
"category": "external",
"summary": "SUSE Bug 1169511 for CVE-2020-2803",
"url": "https://bugzilla.suse.com/1169511"
},
{
"category": "external",
"summary": "SUSE Bug 1172277 for CVE-2020-2803",
"url": "https://bugzilla.suse.com/1172277"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.3,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-2803"
},
{
"cve": "CVE-2020-2805",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-2805"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u251, 8u241, 11.0.6 and 14; Java SE Embedded: 8u241. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, Java SE Embedded, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 8.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-2805",
"url": "https://www.suse.com/security/cve/CVE-2020-2805"
},
{
"category": "external",
"summary": "SUSE Bug 1169511 for CVE-2020-2805",
"url": "https://bugzilla.suse.com/1169511"
},
{
"category": "external",
"summary": "SUSE Bug 1172277 for CVE-2020-2805",
"url": "https://bugzilla.suse.com/1172277"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.3,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-2805"
},
{
"cve": "CVE-2020-2816",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-2816"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE product of Oracle Java SE (component: JSSE). Supported versions that are affected are Java SE: 11.0.6 and 14. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Java SE. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Java SE accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.0 Base Score 7.5 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-2816",
"url": "https://www.suse.com/security/cve/CVE-2020-2816"
},
{
"category": "external",
"summary": "SUSE Bug 1169511 for CVE-2020-2816",
"url": "https://bugzilla.suse.com/1169511"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-2816"
},
{
"cve": "CVE-2020-2830",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-2830"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Concurrency). Supported versions that are affected are Java SE: 7u251, 8u241, 11.0.6 and 14; Java SE Embedded: 8u241. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-2830",
"url": "https://www.suse.com/security/cve/CVE-2020-2830"
},
{
"category": "external",
"summary": "SUSE Bug 1169511 for CVE-2020-2830",
"url": "https://bugzilla.suse.com/1169511"
},
{
"category": "external",
"summary": "SUSE Bug 1172277 for CVE-2020-2830",
"url": "https://bugzilla.suse.com/1172277"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-2830"
},
{
"cve": "CVE-2021-2161",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-2161"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u291, 8u281, 11.0.10, 16; Java SE Embedded: 8u281; Oracle GraalVM Enterprise Edition: 19.3.5, 20.3.1.2 and 21.0.0.2. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Java SE, Java SE Embedded, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. It can also be exploited by supplying untrusted data to APIs in the specified Component. CVSS 3.1 Base Score 5.9 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-2161",
"url": "https://www.suse.com/security/cve/CVE-2021-2161"
},
{
"category": "external",
"summary": "SUSE Bug 1185056 for CVE-2021-2161",
"url": "https://bugzilla.suse.com/1185056"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-2161"
},
{
"cve": "CVE-2021-2163",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-2163"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u291, 8u281, 11.0.10, 16; Java SE Embedded: 8u281; Oracle GraalVM Enterprise Edition: 19.3.5, 20.3.1.2 and 21.0.0.2. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, Oracle GraalVM Enterprise Edition. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Java SE, Java SE Embedded, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 5.3 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-2163",
"url": "https://www.suse.com/security/cve/CVE-2021-2163"
},
{
"category": "external",
"summary": "SUSE Bug 1185055 for CVE-2021-2163",
"url": "https://bugzilla.suse.com/1185055"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-2163"
},
{
"cve": "CVE-2021-2341",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-2341"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking). Supported versions that are affected are Java SE: 7u301, 8u291, 11.0.11, 16.0.1; Oracle GraalVM Enterprise Edition: 20.3.2 and 21.1.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Oracle GraalVM Enterprise Edition. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 3.1 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-2341",
"url": "https://www.suse.com/security/cve/CVE-2021-2341"
},
{
"category": "external",
"summary": "SUSE Bug 1188564 for CVE-2021-2341",
"url": "https://bugzilla.suse.com/1188564"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.1,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-2341"
},
{
"cve": "CVE-2021-2369",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-2369"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Library). Supported versions that are affected are Java SE: 7u301, 8u291, 11.0.11, 16.0.1; Oracle GraalVM Enterprise Edition: 20.3.2 and 21.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Oracle GraalVM Enterprise Edition. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 4.3 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-2369",
"url": "https://www.suse.com/security/cve/CVE-2021-2369"
},
{
"category": "external",
"summary": "SUSE Bug 1188565 for CVE-2021-2369",
"url": "https://bugzilla.suse.com/1188565"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-2369"
},
{
"cve": "CVE-2021-2388",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-2388"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot). Supported versions that are affected are Java SE: 8u291, 11.0.11, 16.0.1; Oracle GraalVM Enterprise Edition: 20.3.2 and 21.1.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Oracle GraalVM Enterprise Edition. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of Java SE, Oracle GraalVM Enterprise Edition. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 7.5 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-2388",
"url": "https://www.suse.com/security/cve/CVE-2021-2388"
},
{
"category": "external",
"summary": "SUSE Bug 1188566 for CVE-2021-2388",
"url": "https://bugzilla.suse.com/1188566"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-accessibility-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-demo-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-devel-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-headless-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-javadoc-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-jmods-13.0.8.0-3.1.x86_64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.aarch64",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.ppc64le",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.s390x",
"openSUSE Tumbleweed:java-13-openjdk-src-13.0.8.0-3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-2388"
}
]
}
opensuse-su-2024:10876-1
Vulnerability from csaf_opensuse
Published
2024-06-15 00:00
Modified
2024-06-15 00:00
Summary
java-1_8_0-openjdk-1.8.0.302-2.2 on GA media
Notes
Title of the patch
java-1_8_0-openjdk-1.8.0.302-2.2 on GA media
Description of the patch
These are all security issues fixed in the java-1_8_0-openjdk-1.8.0.302-2.2 package on the GA media of openSUSE Tumbleweed.
Patchnames
openSUSE-Tumbleweed-2024-10876
Terms of use
CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "java-1_8_0-openjdk-1.8.0.302-2.2 on GA media",
"title": "Title of the patch"
},
{
"category": "description",
"text": "These are all security issues fixed in the java-1_8_0-openjdk-1.8.0.302-2.2 package on the GA media of openSUSE Tumbleweed.",
"title": "Description of the patch"
},
{
"category": "details",
"text": "openSUSE-Tumbleweed-2024-10876",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2024_10876-1.json"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-10165 page",
"url": "https://www.suse.com/security/cve/CVE-2016-10165/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-2183 page",
"url": "https://www.suse.com/security/cve/CVE-2016-2183/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-5546 page",
"url": "https://www.suse.com/security/cve/CVE-2016-5546/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-5547 page",
"url": "https://www.suse.com/security/cve/CVE-2016-5547/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-5548 page",
"url": "https://www.suse.com/security/cve/CVE-2016-5548/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-5549 page",
"url": "https://www.suse.com/security/cve/CVE-2016-5549/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-5552 page",
"url": "https://www.suse.com/security/cve/CVE-2016-5552/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-9840 page",
"url": "https://www.suse.com/security/cve/CVE-2016-9840/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-9843 page",
"url": "https://www.suse.com/security/cve/CVE-2016-9843/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-10053 page",
"url": "https://www.suse.com/security/cve/CVE-2017-10053/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-10067 page",
"url": "https://www.suse.com/security/cve/CVE-2017-10067/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-10074 page",
"url": "https://www.suse.com/security/cve/CVE-2017-10074/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-10078 page",
"url": "https://www.suse.com/security/cve/CVE-2017-10078/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-10081 page",
"url": "https://www.suse.com/security/cve/CVE-2017-10081/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-10086 page",
"url": "https://www.suse.com/security/cve/CVE-2017-10086/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-10087 page",
"url": "https://www.suse.com/security/cve/CVE-2017-10087/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-10089 page",
"url": "https://www.suse.com/security/cve/CVE-2017-10089/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-10090 page",
"url": "https://www.suse.com/security/cve/CVE-2017-10090/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-10096 page",
"url": "https://www.suse.com/security/cve/CVE-2017-10096/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-10101 page",
"url": "https://www.suse.com/security/cve/CVE-2017-10101/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-10102 page",
"url": "https://www.suse.com/security/cve/CVE-2017-10102/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-10105 page",
"url": "https://www.suse.com/security/cve/CVE-2017-10105/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-10107 page",
"url": "https://www.suse.com/security/cve/CVE-2017-10107/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-10108 page",
"url": "https://www.suse.com/security/cve/CVE-2017-10108/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-10109 page",
"url": "https://www.suse.com/security/cve/CVE-2017-10109/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-10110 page",
"url": "https://www.suse.com/security/cve/CVE-2017-10110/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-10111 page",
"url": "https://www.suse.com/security/cve/CVE-2017-10111/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-10114 page",
"url": "https://www.suse.com/security/cve/CVE-2017-10114/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-10115 page",
"url": "https://www.suse.com/security/cve/CVE-2017-10115/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-10116 page",
"url": "https://www.suse.com/security/cve/CVE-2017-10116/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-10118 page",
"url": "https://www.suse.com/security/cve/CVE-2017-10118/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-10125 page",
"url": "https://www.suse.com/security/cve/CVE-2017-10125/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-10135 page",
"url": "https://www.suse.com/security/cve/CVE-2017-10135/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-10176 page",
"url": "https://www.suse.com/security/cve/CVE-2017-10176/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-10193 page",
"url": "https://www.suse.com/security/cve/CVE-2017-10193/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-10198 page",
"url": "https://www.suse.com/security/cve/CVE-2017-10198/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-10243 page",
"url": "https://www.suse.com/security/cve/CVE-2017-10243/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-10274 page",
"url": "https://www.suse.com/security/cve/CVE-2017-10274/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-10281 page",
"url": "https://www.suse.com/security/cve/CVE-2017-10281/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-10285 page",
"url": "https://www.suse.com/security/cve/CVE-2017-10285/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-10295 page",
"url": "https://www.suse.com/security/cve/CVE-2017-10295/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-10345 page",
"url": "https://www.suse.com/security/cve/CVE-2017-10345/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-10346 page",
"url": "https://www.suse.com/security/cve/CVE-2017-10346/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-10347 page",
"url": "https://www.suse.com/security/cve/CVE-2017-10347/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-10348 page",
"url": "https://www.suse.com/security/cve/CVE-2017-10348/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-10349 page",
"url": "https://www.suse.com/security/cve/CVE-2017-10349/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-10350 page",
"url": "https://www.suse.com/security/cve/CVE-2017-10350/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-10355 page",
"url": "https://www.suse.com/security/cve/CVE-2017-10355/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-10356 page",
"url": "https://www.suse.com/security/cve/CVE-2017-10356/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-10357 page",
"url": "https://www.suse.com/security/cve/CVE-2017-10357/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-10388 page",
"url": "https://www.suse.com/security/cve/CVE-2017-10388/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-3231 page",
"url": "https://www.suse.com/security/cve/CVE-2017-3231/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-3241 page",
"url": "https://www.suse.com/security/cve/CVE-2017-3241/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-3252 page",
"url": "https://www.suse.com/security/cve/CVE-2017-3252/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-3253 page",
"url": "https://www.suse.com/security/cve/CVE-2017-3253/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-3260 page",
"url": "https://www.suse.com/security/cve/CVE-2017-3260/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-3261 page",
"url": "https://www.suse.com/security/cve/CVE-2017-3261/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-3272 page",
"url": "https://www.suse.com/security/cve/CVE-2017-3272/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-3289 page",
"url": "https://www.suse.com/security/cve/CVE-2017-3289/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-3509 page",
"url": "https://www.suse.com/security/cve/CVE-2017-3509/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-3511 page",
"url": "https://www.suse.com/security/cve/CVE-2017-3511/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-3512 page",
"url": "https://www.suse.com/security/cve/CVE-2017-3512/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-3514 page",
"url": "https://www.suse.com/security/cve/CVE-2017-3514/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-3526 page",
"url": "https://www.suse.com/security/cve/CVE-2017-3526/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-3533 page",
"url": "https://www.suse.com/security/cve/CVE-2017-3533/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-3539 page",
"url": "https://www.suse.com/security/cve/CVE-2017-3539/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-3544 page",
"url": "https://www.suse.com/security/cve/CVE-2017-3544/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-11212 page",
"url": "https://www.suse.com/security/cve/CVE-2018-11212/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-13785 page",
"url": "https://www.suse.com/security/cve/CVE-2018-13785/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-16435 page",
"url": "https://www.suse.com/security/cve/CVE-2018-16435/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-2579 page",
"url": "https://www.suse.com/security/cve/CVE-2018-2579/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-2582 page",
"url": "https://www.suse.com/security/cve/CVE-2018-2582/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-2588 page",
"url": "https://www.suse.com/security/cve/CVE-2018-2588/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-2599 page",
"url": "https://www.suse.com/security/cve/CVE-2018-2599/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-2602 page",
"url": "https://www.suse.com/security/cve/CVE-2018-2602/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-2603 page",
"url": "https://www.suse.com/security/cve/CVE-2018-2603/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-2618 page",
"url": "https://www.suse.com/security/cve/CVE-2018-2618/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-2629 page",
"url": "https://www.suse.com/security/cve/CVE-2018-2629/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-2633 page",
"url": "https://www.suse.com/security/cve/CVE-2018-2633/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-2634 page",
"url": "https://www.suse.com/security/cve/CVE-2018-2634/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-2637 page",
"url": "https://www.suse.com/security/cve/CVE-2018-2637/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-2641 page",
"url": "https://www.suse.com/security/cve/CVE-2018-2641/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-2663 page",
"url": "https://www.suse.com/security/cve/CVE-2018-2663/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-2677 page",
"url": "https://www.suse.com/security/cve/CVE-2018-2677/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-2678 page",
"url": "https://www.suse.com/security/cve/CVE-2018-2678/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-2790 page",
"url": "https://www.suse.com/security/cve/CVE-2018-2790/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-2794 page",
"url": "https://www.suse.com/security/cve/CVE-2018-2794/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-2795 page",
"url": "https://www.suse.com/security/cve/CVE-2018-2795/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-2796 page",
"url": "https://www.suse.com/security/cve/CVE-2018-2796/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-2797 page",
"url": "https://www.suse.com/security/cve/CVE-2018-2797/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-2798 page",
"url": "https://www.suse.com/security/cve/CVE-2018-2798/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-2799 page",
"url": "https://www.suse.com/security/cve/CVE-2018-2799/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-2800 page",
"url": "https://www.suse.com/security/cve/CVE-2018-2800/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-2814 page",
"url": "https://www.suse.com/security/cve/CVE-2018-2814/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-2815 page",
"url": "https://www.suse.com/security/cve/CVE-2018-2815/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-2938 page",
"url": "https://www.suse.com/security/cve/CVE-2018-2938/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-2940 page",
"url": "https://www.suse.com/security/cve/CVE-2018-2940/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-2952 page",
"url": "https://www.suse.com/security/cve/CVE-2018-2952/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-2973 page",
"url": "https://www.suse.com/security/cve/CVE-2018-2973/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-3136 page",
"url": "https://www.suse.com/security/cve/CVE-2018-3136/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-3139 page",
"url": "https://www.suse.com/security/cve/CVE-2018-3139/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-3149 page",
"url": "https://www.suse.com/security/cve/CVE-2018-3149/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-3169 page",
"url": "https://www.suse.com/security/cve/CVE-2018-3169/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-3180 page",
"url": "https://www.suse.com/security/cve/CVE-2018-3180/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-3183 page",
"url": "https://www.suse.com/security/cve/CVE-2018-3183/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-3214 page",
"url": "https://www.suse.com/security/cve/CVE-2018-3214/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-3639 page",
"url": "https://www.suse.com/security/cve/CVE-2018-3639/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-2422 page",
"url": "https://www.suse.com/security/cve/CVE-2019-2422/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-2426 page",
"url": "https://www.suse.com/security/cve/CVE-2019-2426/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-2602 page",
"url": "https://www.suse.com/security/cve/CVE-2019-2602/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-2684 page",
"url": "https://www.suse.com/security/cve/CVE-2019-2684/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-2698 page",
"url": "https://www.suse.com/security/cve/CVE-2019-2698/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-2745 page",
"url": "https://www.suse.com/security/cve/CVE-2019-2745/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-2762 page",
"url": "https://www.suse.com/security/cve/CVE-2019-2762/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-2766 page",
"url": "https://www.suse.com/security/cve/CVE-2019-2766/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-2769 page",
"url": "https://www.suse.com/security/cve/CVE-2019-2769/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-2786 page",
"url": "https://www.suse.com/security/cve/CVE-2019-2786/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-2816 page",
"url": "https://www.suse.com/security/cve/CVE-2019-2816/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-2842 page",
"url": "https://www.suse.com/security/cve/CVE-2019-2842/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-2894 page",
"url": "https://www.suse.com/security/cve/CVE-2019-2894/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-2933 page",
"url": "https://www.suse.com/security/cve/CVE-2019-2933/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-2945 page",
"url": "https://www.suse.com/security/cve/CVE-2019-2945/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-2949 page",
"url": "https://www.suse.com/security/cve/CVE-2019-2949/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-2958 page",
"url": "https://www.suse.com/security/cve/CVE-2019-2958/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-2962 page",
"url": "https://www.suse.com/security/cve/CVE-2019-2962/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-2964 page",
"url": "https://www.suse.com/security/cve/CVE-2019-2964/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-2973 page",
"url": "https://www.suse.com/security/cve/CVE-2019-2973/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-2975 page",
"url": "https://www.suse.com/security/cve/CVE-2019-2975/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-2978 page",
"url": "https://www.suse.com/security/cve/CVE-2019-2978/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-2981 page",
"url": "https://www.suse.com/security/cve/CVE-2019-2981/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-2983 page",
"url": "https://www.suse.com/security/cve/CVE-2019-2983/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-2987 page",
"url": "https://www.suse.com/security/cve/CVE-2019-2987/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-2988 page",
"url": "https://www.suse.com/security/cve/CVE-2019-2988/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-2989 page",
"url": "https://www.suse.com/security/cve/CVE-2019-2989/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-2992 page",
"url": "https://www.suse.com/security/cve/CVE-2019-2992/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-2999 page",
"url": "https://www.suse.com/security/cve/CVE-2019-2999/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-7317 page",
"url": "https://www.suse.com/security/cve/CVE-2019-7317/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-14556 page",
"url": "https://www.suse.com/security/cve/CVE-2020-14556/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-14577 page",
"url": "https://www.suse.com/security/cve/CVE-2020-14577/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-14578 page",
"url": "https://www.suse.com/security/cve/CVE-2020-14578/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-14579 page",
"url": "https://www.suse.com/security/cve/CVE-2020-14579/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-14581 page",
"url": "https://www.suse.com/security/cve/CVE-2020-14581/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-14583 page",
"url": "https://www.suse.com/security/cve/CVE-2020-14583/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-14593 page",
"url": "https://www.suse.com/security/cve/CVE-2020-14593/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-14621 page",
"url": "https://www.suse.com/security/cve/CVE-2020-14621/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-14779 page",
"url": "https://www.suse.com/security/cve/CVE-2020-14779/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-14781 page",
"url": "https://www.suse.com/security/cve/CVE-2020-14781/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-14782 page",
"url": "https://www.suse.com/security/cve/CVE-2020-14782/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-14792 page",
"url": "https://www.suse.com/security/cve/CVE-2020-14792/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-14796 page",
"url": "https://www.suse.com/security/cve/CVE-2020-14796/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-14797 page",
"url": "https://www.suse.com/security/cve/CVE-2020-14797/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-14798 page",
"url": "https://www.suse.com/security/cve/CVE-2020-14798/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-14803 page",
"url": "https://www.suse.com/security/cve/CVE-2020-14803/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-2583 page",
"url": "https://www.suse.com/security/cve/CVE-2020-2583/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-2590 page",
"url": "https://www.suse.com/security/cve/CVE-2020-2590/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-2593 page",
"url": "https://www.suse.com/security/cve/CVE-2020-2593/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-2601 page",
"url": "https://www.suse.com/security/cve/CVE-2020-2601/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-2604 page",
"url": "https://www.suse.com/security/cve/CVE-2020-2604/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-2654 page",
"url": "https://www.suse.com/security/cve/CVE-2020-2654/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-2659 page",
"url": "https://www.suse.com/security/cve/CVE-2020-2659/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-2754 page",
"url": "https://www.suse.com/security/cve/CVE-2020-2754/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-2755 page",
"url": "https://www.suse.com/security/cve/CVE-2020-2755/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-2756 page",
"url": "https://www.suse.com/security/cve/CVE-2020-2756/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-2757 page",
"url": "https://www.suse.com/security/cve/CVE-2020-2757/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-2773 page",
"url": "https://www.suse.com/security/cve/CVE-2020-2773/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-2781 page",
"url": "https://www.suse.com/security/cve/CVE-2020-2781/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-2800 page",
"url": "https://www.suse.com/security/cve/CVE-2020-2800/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-2803 page",
"url": "https://www.suse.com/security/cve/CVE-2020-2803/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-2805 page",
"url": "https://www.suse.com/security/cve/CVE-2020-2805/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-2830 page",
"url": "https://www.suse.com/security/cve/CVE-2020-2830/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-2161 page",
"url": "https://www.suse.com/security/cve/CVE-2021-2161/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-2163 page",
"url": "https://www.suse.com/security/cve/CVE-2021-2163/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-2341 page",
"url": "https://www.suse.com/security/cve/CVE-2021-2341/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-2369 page",
"url": "https://www.suse.com/security/cve/CVE-2021-2369/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-2388 page",
"url": "https://www.suse.com/security/cve/CVE-2021-2388/"
}
],
"title": "java-1_8_0-openjdk-1.8.0.302-2.2 on GA media",
"tracking": {
"current_release_date": "2024-06-15T00:00:00Z",
"generator": {
"date": "2024-06-15T00:00:00Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "openSUSE-SU-2024:10876-1",
"initial_release_date": "2024-06-15T00:00:00Z",
"revision_history": [
{
"date": "2024-06-15T00:00:00Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"product": {
"name": "java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"product_id": "java-1_8_0-openjdk-1.8.0.302-2.2.aarch64"
}
},
{
"category": "product_version",
"name": "java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"product": {
"name": "java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"product_id": "java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64"
}
},
{
"category": "product_version",
"name": "java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"product": {
"name": "java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"product_id": "java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64"
}
},
{
"category": "product_version",
"name": "java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"product": {
"name": "java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"product_id": "java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64"
}
},
{
"category": "product_version",
"name": "java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"product": {
"name": "java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"product_id": "java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64"
}
},
{
"category": "product_version",
"name": "java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"product": {
"name": "java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"product_id": "java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64"
}
},
{
"category": "product_version",
"name": "java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"product": {
"name": "java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"product_id": "java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64"
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"product": {
"name": "java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"product_id": "java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le"
}
},
{
"category": "product_version",
"name": "java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"product": {
"name": "java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"product_id": "java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le"
}
},
{
"category": "product_version",
"name": "java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"product": {
"name": "java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"product_id": "java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le"
}
},
{
"category": "product_version",
"name": "java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"product": {
"name": "java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"product_id": "java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le"
}
},
{
"category": "product_version",
"name": "java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"product": {
"name": "java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"product_id": "java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le"
}
},
{
"category": "product_version",
"name": "java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"product": {
"name": "java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"product_id": "java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le"
}
},
{
"category": "product_version",
"name": "java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"product": {
"name": "java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"product_id": "java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le"
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"product": {
"name": "java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"product_id": "java-1_8_0-openjdk-1.8.0.302-2.2.s390x"
}
},
{
"category": "product_version",
"name": "java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"product": {
"name": "java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"product_id": "java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x"
}
},
{
"category": "product_version",
"name": "java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"product": {
"name": "java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"product_id": "java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x"
}
},
{
"category": "product_version",
"name": "java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"product": {
"name": "java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"product_id": "java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x"
}
},
{
"category": "product_version",
"name": "java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"product": {
"name": "java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"product_id": "java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x"
}
},
{
"category": "product_version",
"name": "java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"product": {
"name": "java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"product_id": "java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x"
}
},
{
"category": "product_version",
"name": "java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"product": {
"name": "java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"product_id": "java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"product": {
"name": "java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"product_id": "java-1_8_0-openjdk-1.8.0.302-2.2.x86_64"
}
},
{
"category": "product_version",
"name": "java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"product": {
"name": "java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"product_id": "java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64"
}
},
{
"category": "product_version",
"name": "java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"product": {
"name": "java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"product_id": "java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64"
}
},
{
"category": "product_version",
"name": "java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"product": {
"name": "java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"product_id": "java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64"
}
},
{
"category": "product_version",
"name": "java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"product": {
"name": "java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"product_id": "java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64"
}
},
{
"category": "product_version",
"name": "java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"product": {
"name": "java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"product_id": "java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64"
}
},
{
"category": "product_version",
"name": "java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64",
"product": {
"name": "java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64",
"product_id": "java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "openSUSE Tumbleweed",
"product": {
"name": "openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed",
"product_identification_helper": {
"cpe": "cpe:/o:opensuse:tumbleweed"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-1.8.0.302-2.2.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64"
},
"product_reference": "java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le"
},
"product_reference": "java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-1.8.0.302-2.2.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x"
},
"product_reference": "java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-1.8.0.302-2.2.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64"
},
"product_reference": "java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64"
},
"product_reference": "java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le"
},
"product_reference": "java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x"
},
"product_reference": "java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64"
},
"product_reference": "java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64"
},
"product_reference": "java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le"
},
"product_reference": "java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x"
},
"product_reference": "java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64"
},
"product_reference": "java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64"
},
"product_reference": "java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le"
},
"product_reference": "java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x"
},
"product_reference": "java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64"
},
"product_reference": "java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64"
},
"product_reference": "java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le"
},
"product_reference": "java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x"
},
"product_reference": "java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64"
},
"product_reference": "java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64"
},
"product_reference": "java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le"
},
"product_reference": "java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x"
},
"product_reference": "java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64"
},
"product_reference": "java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64"
},
"product_reference": "java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le"
},
"product_reference": "java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x"
},
"product_reference": "java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
},
"product_reference": "java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2016-10165",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-10165"
}
],
"notes": [
{
"category": "general",
"text": "The Type_MLU_Read function in cmstypes.c in Little CMS (aka lcms2) allows remote attackers to obtain sensitive information or cause a denial of service via an image with a crafted ICC profile, which triggers an out-of-bounds heap read.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-10165",
"url": "https://www.suse.com/security/cve/CVE-2016-10165"
},
{
"category": "external",
"summary": "SUSE Bug 1021364 for CVE-2016-10165",
"url": "https://bugzilla.suse.com/1021364"
},
{
"category": "external",
"summary": "SUSE Bug 1064069 for CVE-2016-10165",
"url": "https://bugzilla.suse.com/1064069"
},
{
"category": "external",
"summary": "SUSE Bug 1070162 for CVE-2016-10165",
"url": "https://bugzilla.suse.com/1070162"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2016-10165"
},
{
"cve": "CVE-2016-2183",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-2183"
}
],
"notes": [
{
"category": "general",
"text": "The DES and Triple DES ciphers, as used in the TLS, SSH, and IPSec protocols and other protocols and products, have a birthday bound of approximately four billion blocks, which makes it easier for remote attackers to obtain cleartext data via a birthday attack against a long-duration encrypted session, as demonstrated by an HTTPS session using Triple DES in CBC mode, aka a \"Sweet32\" attack.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-2183",
"url": "https://www.suse.com/security/cve/CVE-2016-2183"
},
{
"category": "external",
"summary": "SUSE Bug 1001912 for CVE-2016-2183",
"url": "https://bugzilla.suse.com/1001912"
},
{
"category": "external",
"summary": "SUSE Bug 1024218 for CVE-2016-2183",
"url": "https://bugzilla.suse.com/1024218"
},
{
"category": "external",
"summary": "SUSE Bug 1027038 for CVE-2016-2183",
"url": "https://bugzilla.suse.com/1027038"
},
{
"category": "external",
"summary": "SUSE Bug 1034689 for CVE-2016-2183",
"url": "https://bugzilla.suse.com/1034689"
},
{
"category": "external",
"summary": "SUSE Bug 1056614 for CVE-2016-2183",
"url": "https://bugzilla.suse.com/1056614"
},
{
"category": "external",
"summary": "SUSE Bug 1171693 for CVE-2016-2183",
"url": "https://bugzilla.suse.com/1171693"
},
{
"category": "external",
"summary": "SUSE Bug 994844 for CVE-2016-2183",
"url": "https://bugzilla.suse.com/994844"
},
{
"category": "external",
"summary": "SUSE Bug 995359 for CVE-2016-2183",
"url": "https://bugzilla.suse.com/995359"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2016-2183"
},
{
"cve": "CVE-2016-5546",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-5546"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Libraries). Supported versions that are affected are Java SE: 6u131, 7u121 and 8u112; Java SE Embedded: 8u111; JRockit: R28.3.12. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Java SE, Java SE Embedded, JRockit accessible data. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS v3.0 Base Score 7.5 (Integrity impacts).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-5546",
"url": "https://www.suse.com/security/cve/CVE-2016-5546"
},
{
"category": "external",
"summary": "SUSE Bug 1020905 for CVE-2016-5546",
"url": "https://bugzilla.suse.com/1020905"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2016-5546"
},
{
"cve": "CVE-2016-5547",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-5547"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Libraries). Supported versions that are affected are Java SE: 7u121 and 8u112; Java SE Embedded: 8u111; JRockit: R28.3.12. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS v3.0 Base Score 5.3 (Availability impacts).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-5547",
"url": "https://www.suse.com/security/cve/CVE-2016-5547"
},
{
"category": "external",
"summary": "SUSE Bug 1020905 for CVE-2016-5547",
"url": "https://bugzilla.suse.com/1020905"
},
{
"category": "external",
"summary": "SUSE Bug 1024218 for CVE-2016-5547",
"url": "https://bugzilla.suse.com/1024218"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2016-5547"
},
{
"cve": "CVE-2016-5548",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-5548"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries). Supported versions that are affected are Java SE: 6u131, 7u121 and 8u112; Java SE Embedded: 8u111. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS v3.0 Base Score 6.5 (Confidentiality impacts).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-5548",
"url": "https://www.suse.com/security/cve/CVE-2016-5548"
},
{
"category": "external",
"summary": "SUSE Bug 1020905 for CVE-2016-5548",
"url": "https://bugzilla.suse.com/1020905"
},
{
"category": "external",
"summary": "SUSE Bug 1024218 for CVE-2016-5548",
"url": "https://bugzilla.suse.com/1024218"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2016-5548"
},
{
"cve": "CVE-2016-5549",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-5549"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries). Supported versions that are affected are Java SE: 7u121 and 8u112; Java SE Embedded: 8u111. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS v3.0 Base Score 6.5 (Confidentiality impacts).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-5549",
"url": "https://www.suse.com/security/cve/CVE-2016-5549"
},
{
"category": "external",
"summary": "SUSE Bug 1020905 for CVE-2016-5549",
"url": "https://bugzilla.suse.com/1020905"
},
{
"category": "external",
"summary": "SUSE Bug 1024218 for CVE-2016-5549",
"url": "https://bugzilla.suse.com/1024218"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2016-5549"
},
{
"cve": "CVE-2016-5552",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-5552"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Networking). Supported versions that are affected are Java SE: 6u131, 7u121 and 8u112; Java SE Embedded: 8u111; JRockit: R28.3.12. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded, JRockit accessible data. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS v3.0 Base Score 5.3 (Integrity impacts).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-5552",
"url": "https://www.suse.com/security/cve/CVE-2016-5552"
},
{
"category": "external",
"summary": "SUSE Bug 1020905 for CVE-2016-5552",
"url": "https://bugzilla.suse.com/1020905"
},
{
"category": "external",
"summary": "SUSE Bug 1024218 for CVE-2016-5552",
"url": "https://bugzilla.suse.com/1024218"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2016-5552"
},
{
"cve": "CVE-2016-9840",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-9840"
}
],
"notes": [
{
"category": "general",
"text": "inftrees.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper pointer arithmetic.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-9840",
"url": "https://www.suse.com/security/cve/CVE-2016-9840"
},
{
"category": "external",
"summary": "SUSE Bug 1003579 for CVE-2016-9840",
"url": "https://bugzilla.suse.com/1003579"
},
{
"category": "external",
"summary": "SUSE Bug 1022633 for CVE-2016-9840",
"url": "https://bugzilla.suse.com/1022633"
},
{
"category": "external",
"summary": "SUSE Bug 1023215 for CVE-2016-9840",
"url": "https://bugzilla.suse.com/1023215"
},
{
"category": "external",
"summary": "SUSE Bug 1038505 for CVE-2016-9840",
"url": "https://bugzilla.suse.com/1038505"
},
{
"category": "external",
"summary": "SUSE Bug 1062104 for CVE-2016-9840",
"url": "https://bugzilla.suse.com/1062104"
},
{
"category": "external",
"summary": "SUSE Bug 1120866 for CVE-2016-9840",
"url": "https://bugzilla.suse.com/1120866"
},
{
"category": "external",
"summary": "SUSE Bug 1123150 for CVE-2016-9840",
"url": "https://bugzilla.suse.com/1123150"
},
{
"category": "external",
"summary": "SUSE Bug 1127473 for CVE-2016-9840",
"url": "https://bugzilla.suse.com/1127473"
},
{
"category": "external",
"summary": "SUSE Bug 1184301 for CVE-2016-9840",
"url": "https://bugzilla.suse.com/1184301"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2016-9840"
},
{
"cve": "CVE-2016-9843",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-9843"
}
],
"notes": [
{
"category": "general",
"text": "The crc32_big function in crc32.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact via vectors involving big-endian CRC calculation.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-9843",
"url": "https://www.suse.com/security/cve/CVE-2016-9843"
},
{
"category": "external",
"summary": "SUSE Bug 1003580 for CVE-2016-9843",
"url": "https://bugzilla.suse.com/1003580"
},
{
"category": "external",
"summary": "SUSE Bug 1013882 for CVE-2016-9843",
"url": "https://bugzilla.suse.com/1013882"
},
{
"category": "external",
"summary": "SUSE Bug 1038505 for CVE-2016-9843",
"url": "https://bugzilla.suse.com/1038505"
},
{
"category": "external",
"summary": "SUSE Bug 1062104 for CVE-2016-9843",
"url": "https://bugzilla.suse.com/1062104"
},
{
"category": "external",
"summary": "SUSE Bug 1116686 for CVE-2016-9843",
"url": "https://bugzilla.suse.com/1116686"
},
{
"category": "external",
"summary": "SUSE Bug 1120866 for CVE-2016-9843",
"url": "https://bugzilla.suse.com/1120866"
},
{
"category": "external",
"summary": "SUSE Bug 1123150 for CVE-2016-9843",
"url": "https://bugzilla.suse.com/1123150"
},
{
"category": "external",
"summary": "SUSE Bug 1127473 for CVE-2016-9843",
"url": "https://bugzilla.suse.com/1127473"
},
{
"category": "external",
"summary": "SUSE Bug 1184301 for CVE-2016-9843",
"url": "https://bugzilla.suse.com/1184301"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2016-9843"
},
{
"cve": "CVE-2017-10053",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-10053"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: 2D). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131; Java SE Embedded: 8u131; JRockit: R28.3.14. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-10053",
"url": "https://www.suse.com/security/cve/CVE-2017-10053"
},
{
"category": "external",
"summary": "SUSE Bug 1049305 for CVE-2017-10053",
"url": "https://bugzilla.suse.com/1049305"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2017-10053"
},
{
"cve": "CVE-2017-10067",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-10067"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of Java SE. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 7.5 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-10067",
"url": "https://www.suse.com/security/cve/CVE-2017-10067"
},
{
"category": "external",
"summary": "SUSE Bug 1049306 for CVE-2017-10067",
"url": "https://bugzilla.suse.com/1049306"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2017-10067"
},
{
"cve": "CVE-2017-10074",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-10074"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Hotspot). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131; Java SE Embedded: 8u131. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, Java SE Embedded, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 8.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-10074",
"url": "https://www.suse.com/security/cve/CVE-2017-10074"
},
{
"category": "external",
"summary": "SUSE Bug 1049307 for CVE-2017-10074",
"url": "https://bugzilla.suse.com/1049307"
},
{
"category": "external",
"summary": "SUSE Bug 1049333 for CVE-2017-10074",
"url": "https://bugzilla.suse.com/1049333"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.3,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2017-10074"
},
{
"cve": "CVE-2017-10078",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-10078"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Scripting). The supported version that is affected is Java SE: 8u131. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise Java SE. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Java SE accessible data as well as unauthorized access to critical data or complete access to all Java SE accessible data. Note: This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 8.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-10078",
"url": "https://www.suse.com/security/cve/CVE-2017-10078"
},
{
"category": "external",
"summary": "SUSE Bug 1049308 for CVE-2017-10078",
"url": "https://bugzilla.suse.com/1049308"
},
{
"category": "external",
"summary": "SUSE Bug 1049333 for CVE-2017-10078",
"url": "https://bugzilla.suse.com/1049333"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-10078"
},
{
"cve": "CVE-2017-10081",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-10081"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Hotspot). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131; Java SE Embedded: 8u131. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 4.3 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-10081",
"url": "https://www.suse.com/security/cve/CVE-2017-10081"
},
{
"category": "external",
"summary": "SUSE Bug 1049309 for CVE-2017-10081",
"url": "https://bugzilla.suse.com/1049309"
},
{
"category": "external",
"summary": "SUSE Bug 1049333 for CVE-2017-10081",
"url": "https://bugzilla.suse.com/1049333"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2017-10081"
},
{
"cve": "CVE-2017-10086",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-10086"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE component of Oracle Java SE (subcomponent: JavaFX). Supported versions that are affected are Java SE: 7u141 and 8u131. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 9.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-10086",
"url": "https://www.suse.com/security/cve/CVE-2017-10086"
},
{
"category": "external",
"summary": "SUSE Bug 1049310 for CVE-2017-10086",
"url": "https://bugzilla.suse.com/1049310"
},
{
"category": "external",
"summary": "SUSE Bug 1049333 for CVE-2017-10086",
"url": "https://bugzilla.suse.com/1049333"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.6,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-10086"
},
{
"cve": "CVE-2017-10087",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-10087"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131; Java SE Embedded: 8u131. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, Java SE Embedded, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 9.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-10087",
"url": "https://www.suse.com/security/cve/CVE-2017-10087"
},
{
"category": "external",
"summary": "SUSE Bug 1049311 for CVE-2017-10087",
"url": "https://bugzilla.suse.com/1049311"
},
{
"category": "external",
"summary": "SUSE Bug 1049333 for CVE-2017-10087",
"url": "https://bugzilla.suse.com/1049333"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.6,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-10087"
},
{
"cve": "CVE-2017-10089",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-10089"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE component of Oracle Java SE (subcomponent: ImageIO). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 9.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-10089",
"url": "https://www.suse.com/security/cve/CVE-2017-10089"
},
{
"category": "external",
"summary": "SUSE Bug 1049312 for CVE-2017-10089",
"url": "https://bugzilla.suse.com/1049312"
},
{
"category": "external",
"summary": "SUSE Bug 1049333 for CVE-2017-10089",
"url": "https://bugzilla.suse.com/1049333"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.6,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-10089"
},
{
"cve": "CVE-2017-10090",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-10090"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries). Supported versions that are affected are Java SE: 7u141 and 8u131; Java SE Embedded: 8u131. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, Java SE Embedded, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 9.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-10090",
"url": "https://www.suse.com/security/cve/CVE-2017-10090"
},
{
"category": "external",
"summary": "SUSE Bug 1049313 for CVE-2017-10090",
"url": "https://bugzilla.suse.com/1049313"
},
{
"category": "external",
"summary": "SUSE Bug 1049333 for CVE-2017-10090",
"url": "https://bugzilla.suse.com/1049333"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.6,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-10090"
},
{
"cve": "CVE-2017-10096",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-10096"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: JAXP). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131; Java SE Embedded: 8u131. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, Java SE Embedded, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 9.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-10096",
"url": "https://www.suse.com/security/cve/CVE-2017-10096"
},
{
"category": "external",
"summary": "SUSE Bug 1049314 for CVE-2017-10096",
"url": "https://bugzilla.suse.com/1049314"
},
{
"category": "external",
"summary": "SUSE Bug 1049333 for CVE-2017-10096",
"url": "https://bugzilla.suse.com/1049333"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.6,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-10096"
},
{
"cve": "CVE-2017-10101",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-10101"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: JAXP). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131; Java SE Embedded: 8u131. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, Java SE Embedded, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 9.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-10101",
"url": "https://www.suse.com/security/cve/CVE-2017-10101"
},
{
"category": "external",
"summary": "SUSE Bug 1049315 for CVE-2017-10101",
"url": "https://bugzilla.suse.com/1049315"
},
{
"category": "external",
"summary": "SUSE Bug 1049333 for CVE-2017-10101",
"url": "https://bugzilla.suse.com/1049333"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.6,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-10101"
},
{
"cve": "CVE-2017-10102",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-10102"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: RMI). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131; Java SE Embedded: 8u131. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. While the vulnerability is in Java SE, Java SE Embedded, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE, Java SE Embedded. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.0 Base Score 9.0 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-10102",
"url": "https://www.suse.com/security/cve/CVE-2017-10102"
},
{
"category": "external",
"summary": "SUSE Bug 1049316 for CVE-2017-10102",
"url": "https://bugzilla.suse.com/1049316"
},
{
"category": "external",
"summary": "SUSE Bug 1049333 for CVE-2017-10102",
"url": "https://bugzilla.suse.com/1049333"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2017-10102"
},
{
"cve": "CVE-2017-10105",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-10105"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Deployment). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 4.3 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-10105",
"url": "https://www.suse.com/security/cve/CVE-2017-10105"
},
{
"category": "external",
"summary": "SUSE Bug 1049317 for CVE-2017-10105",
"url": "https://bugzilla.suse.com/1049317"
},
{
"category": "external",
"summary": "SUSE Bug 1049333 for CVE-2017-10105",
"url": "https://bugzilla.suse.com/1049333"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2017-10105"
},
{
"cve": "CVE-2017-10107",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-10107"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: RMI). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131; Java SE Embedded: 8u131. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, Java SE Embedded, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 9.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-10107",
"url": "https://www.suse.com/security/cve/CVE-2017-10107"
},
{
"category": "external",
"summary": "SUSE Bug 1049318 for CVE-2017-10107",
"url": "https://bugzilla.suse.com/1049318"
},
{
"category": "external",
"summary": "SUSE Bug 1049333 for CVE-2017-10107",
"url": "https://bugzilla.suse.com/1049333"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.6,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2017-10107"
},
{
"cve": "CVE-2017-10108",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-10108"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Serialization). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131; Java SE Embedded: 8u131; JRockit: R28.3.14. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-10108",
"url": "https://www.suse.com/security/cve/CVE-2017-10108"
},
{
"category": "external",
"summary": "SUSE Bug 1049319 for CVE-2017-10108",
"url": "https://bugzilla.suse.com/1049319"
},
{
"category": "external",
"summary": "SUSE Bug 1049333 for CVE-2017-10108",
"url": "https://bugzilla.suse.com/1049333"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2017-10108"
},
{
"cve": "CVE-2017-10109",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-10109"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Serialization). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131; Java SE Embedded: 8u131; JRockit: R28.3.14. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-10109",
"url": "https://www.suse.com/security/cve/CVE-2017-10109"
},
{
"category": "external",
"summary": "SUSE Bug 1049320 for CVE-2017-10109",
"url": "https://bugzilla.suse.com/1049320"
},
{
"category": "external",
"summary": "SUSE Bug 1049333 for CVE-2017-10109",
"url": "https://bugzilla.suse.com/1049333"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2017-10109"
},
{
"cve": "CVE-2017-10110",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-10110"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE component of Oracle Java SE (subcomponent: AWT). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 9.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-10110",
"url": "https://www.suse.com/security/cve/CVE-2017-10110"
},
{
"category": "external",
"summary": "SUSE Bug 1049321 for CVE-2017-10110",
"url": "https://bugzilla.suse.com/1049321"
},
{
"category": "external",
"summary": "SUSE Bug 1049333 for CVE-2017-10110",
"url": "https://bugzilla.suse.com/1049333"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.6,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-10110"
},
{
"cve": "CVE-2017-10111",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-10111"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries). The supported version that is affected is Java SE: 8u131; Java SE Embedded: 8u131. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, Java SE Embedded, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 9.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-10111",
"url": "https://www.suse.com/security/cve/CVE-2017-10111"
},
{
"category": "external",
"summary": "SUSE Bug 1049322 for CVE-2017-10111",
"url": "https://bugzilla.suse.com/1049322"
},
{
"category": "external",
"summary": "SUSE Bug 1049333 for CVE-2017-10111",
"url": "https://bugzilla.suse.com/1049333"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.6,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-10111"
},
{
"cve": "CVE-2017-10114",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-10114"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE component of Oracle Java SE (subcomponent: JavaFX). Supported versions that are affected are Java SE: 7u141 and 8u131. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 8.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-10114",
"url": "https://www.suse.com/security/cve/CVE-2017-10114"
},
{
"category": "external",
"summary": "SUSE Bug 1049323 for CVE-2017-10114",
"url": "https://bugzilla.suse.com/1049323"
},
{
"category": "external",
"summary": "SUSE Bug 1049333 for CVE-2017-10114",
"url": "https://bugzilla.suse.com/1049333"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.3,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2017-10114"
},
{
"cve": "CVE-2017-10115",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-10115"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JCE). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131; Java SE Embedded: 8u131; JRockit: R28.3.14. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Java SE, Java SE Embedded, JRockit accessible data. Note: This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 7.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-10115",
"url": "https://www.suse.com/security/cve/CVE-2017-10115"
},
{
"category": "external",
"summary": "SUSE Bug 1020905 for CVE-2017-10115",
"url": "https://bugzilla.suse.com/1020905"
},
{
"category": "external",
"summary": "SUSE Bug 1049324 for CVE-2017-10115",
"url": "https://bugzilla.suse.com/1049324"
},
{
"category": "external",
"summary": "SUSE Bug 1049333 for CVE-2017-10115",
"url": "https://bugzilla.suse.com/1049333"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2017-10115"
},
{
"cve": "CVE-2017-10116",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-10116"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131; Java SE Embedded: 8u131; JRockit: R28.3.14. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, Java SE Embedded, JRockit, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE, Java SE Embedded, JRockit. Note: This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 8.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-10116",
"url": "https://www.suse.com/security/cve/CVE-2017-10116"
},
{
"category": "external",
"summary": "SUSE Bug 1049325 for CVE-2017-10116",
"url": "https://bugzilla.suse.com/1049325"
},
{
"category": "external",
"summary": "SUSE Bug 1049333 for CVE-2017-10116",
"url": "https://bugzilla.suse.com/1049333"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.3,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2017-10116"
},
{
"cve": "CVE-2017-10118",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-10118"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JCE). Supported versions that are affected are Java SE: 7u141 and 8u131; Java SE Embedded: 8u131; JRockit: R28.3.14. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Java SE, Java SE Embedded, JRockit accessible data. Note: This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 7.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-10118",
"url": "https://www.suse.com/security/cve/CVE-2017-10118"
},
{
"category": "external",
"summary": "SUSE Bug 1049326 for CVE-2017-10118",
"url": "https://bugzilla.suse.com/1049326"
},
{
"category": "external",
"summary": "SUSE Bug 1049333 for CVE-2017-10118",
"url": "https://bugzilla.suse.com/1049333"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2017-10118"
},
{
"cve": "CVE-2017-10125",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-10125"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Deployment). Supported versions that are affected are Java SE: 7u141 and 8u131. Difficult to exploit vulnerability allows physical access to compromise Java SE. While the vulnerability is in Java SE, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE. Note: Applies to deployment of Java where the Java Auto Update is enabled. CVSS 3.0 Base Score 7.1 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:P/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-10125",
"url": "https://www.suse.com/security/cve/CVE-2017-10125"
},
{
"category": "external",
"summary": "SUSE Bug 1049327 for CVE-2017-10125",
"url": "https://bugzilla.suse.com/1049327"
},
{
"category": "external",
"summary": "SUSE Bug 1049333 for CVE-2017-10125",
"url": "https://bugzilla.suse.com/1049333"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:P/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2017-10125"
},
{
"cve": "CVE-2017-10135",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-10135"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JCE). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131; Java SE Embedded: 8u131; JRockit: R28.3.14. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Java SE, Java SE Embedded, JRockit accessible data. Note: This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 5.9 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-10135",
"url": "https://www.suse.com/security/cve/CVE-2017-10135"
},
{
"category": "external",
"summary": "SUSE Bug 1049328 for CVE-2017-10135",
"url": "https://bugzilla.suse.com/1049328"
},
{
"category": "external",
"summary": "SUSE Bug 1049333 for CVE-2017-10135",
"url": "https://bugzilla.suse.com/1049333"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2017-10135"
},
{
"cve": "CVE-2017-10176",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-10176"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 7u141 and 8u131; Java SE Embedded: 8u131; JRockit: R28.3.14. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Java SE, Java SE Embedded, JRockit accessible data. Note: This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 7.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-10176",
"url": "https://www.suse.com/security/cve/CVE-2017-10176"
},
{
"category": "external",
"summary": "SUSE Bug 1049329 for CVE-2017-10176",
"url": "https://bugzilla.suse.com/1049329"
},
{
"category": "external",
"summary": "SUSE Bug 1049333 for CVE-2017-10176",
"url": "https://bugzilla.suse.com/1049333"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2017-10176"
},
{
"cve": "CVE-2017-10193",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-10193"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131; Java SE Embedded: 8u131. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 3.1 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-10193",
"url": "https://www.suse.com/security/cve/CVE-2017-10193"
},
{
"category": "external",
"summary": "SUSE Bug 1049330 for CVE-2017-10193",
"url": "https://bugzilla.suse.com/1049330"
},
{
"category": "external",
"summary": "SUSE Bug 1049333 for CVE-2017-10193",
"url": "https://bugzilla.suse.com/1049333"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.1,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2017-10193"
},
{
"cve": "CVE-2017-10198",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-10198"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131; Java SE Embedded: 8u131; JRockit: R28.3.14. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. While the vulnerability is in Java SE, Java SE Embedded, JRockit, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Java SE, Java SE Embedded, JRockit accessible data. Note: This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 6.8 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-10198",
"url": "https://www.suse.com/security/cve/CVE-2017-10198"
},
{
"category": "external",
"summary": "SUSE Bug 1049331 for CVE-2017-10198",
"url": "https://bugzilla.suse.com/1049331"
},
{
"category": "external",
"summary": "SUSE Bug 1049333 for CVE-2017-10198",
"url": "https://bugzilla.suse.com/1049333"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.8,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2017-10198"
},
{
"cve": "CVE-2017-10243",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-10243"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JAX-WS). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131; Java SE Embedded: 8u131; JRockit: R28.3.14. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE, Java SE Embedded, JRockit accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 6.5 (Confidentiality and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-10243",
"url": "https://www.suse.com/security/cve/CVE-2017-10243"
},
{
"category": "external",
"summary": "SUSE Bug 1049332 for CVE-2017-10243",
"url": "https://bugzilla.suse.com/1049332"
},
{
"category": "external",
"summary": "SUSE Bug 1049333 for CVE-2017-10243",
"url": "https://bugzilla.suse.com/1049333"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2017-10243"
},
{
"cve": "CVE-2017-10274",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-10274"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Smart Card IO). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Java SE accessible data as well as unauthorized access to critical data or complete access to all Java SE accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 6.8 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-10274",
"url": "https://www.suse.com/security/cve/CVE-2017-10274"
},
{
"category": "external",
"summary": "SUSE Bug 1064071 for CVE-2017-10274",
"url": "https://bugzilla.suse.com/1064071"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.8,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2017-10274"
},
{
"cve": "CVE-2017-10281",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-10281"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Serialization). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144; JRockit: R28.3.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-10281",
"url": "https://www.suse.com/security/cve/CVE-2017-10281"
},
{
"category": "external",
"summary": "SUSE Bug 1064072 for CVE-2017-10281",
"url": "https://bugzilla.suse.com/1064072"
},
{
"category": "external",
"summary": "SUSE Bug 1070162 for CVE-2017-10281",
"url": "https://bugzilla.suse.com/1070162"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2017-10281"
},
{
"cve": "CVE-2017-10285",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-10285"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: RMI). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, Java SE Embedded, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 9.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-10285",
"url": "https://www.suse.com/security/cve/CVE-2017-10285"
},
{
"category": "external",
"summary": "SUSE Bug 1064073 for CVE-2017-10285",
"url": "https://bugzilla.suse.com/1064073"
},
{
"category": "external",
"summary": "SUSE Bug 1070162 for CVE-2017-10285",
"url": "https://bugzilla.suse.com/1070162"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2017-10285"
},
{
"cve": "CVE-2017-10295",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-10295"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Networking). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144; JRockit: R28.3.15. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Java SE, Java SE Embedded, JRockit. While the vulnerability is in Java SE, Java SE Embedded, JRockit, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded, JRockit accessible data. Note: This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 4.0 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-10295",
"url": "https://www.suse.com/security/cve/CVE-2017-10295"
},
{
"category": "external",
"summary": "SUSE Bug 1064075 for CVE-2017-10295",
"url": "https://bugzilla.suse.com/1064075"
},
{
"category": "external",
"summary": "SUSE Bug 1070162 for CVE-2017-10295",
"url": "https://bugzilla.suse.com/1070162"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2017-10295"
},
{
"cve": "CVE-2017-10345",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-10345"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Serialization). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144; JRockit: R28.3.15. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 3.1 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-10345",
"url": "https://www.suse.com/security/cve/CVE-2017-10345"
},
{
"category": "external",
"summary": "SUSE Bug 1064077 for CVE-2017-10345",
"url": "https://bugzilla.suse.com/1064077"
},
{
"category": "external",
"summary": "SUSE Bug 1070162 for CVE-2017-10345",
"url": "https://bugzilla.suse.com/1070162"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.1,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2017-10345"
},
{
"cve": "CVE-2017-10346",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-10346"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Hotspot). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, Java SE Embedded, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 9.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-10346",
"url": "https://www.suse.com/security/cve/CVE-2017-10346"
},
{
"category": "external",
"summary": "SUSE Bug 1064078 for CVE-2017-10346",
"url": "https://bugzilla.suse.com/1064078"
},
{
"category": "external",
"summary": "SUSE Bug 1070162 for CVE-2017-10346",
"url": "https://bugzilla.suse.com/1070162"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-10346"
},
{
"cve": "CVE-2017-10347",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-10347"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, JRockit component of Oracle Java SE (subcomponent: Serialization). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, JRockit. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-10347",
"url": "https://www.suse.com/security/cve/CVE-2017-10347"
},
{
"category": "external",
"summary": "SUSE Bug 1064079 for CVE-2017-10347",
"url": "https://bugzilla.suse.com/1064079"
},
{
"category": "external",
"summary": "SUSE Bug 1070162 for CVE-2017-10347",
"url": "https://bugzilla.suse.com/1070162"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2017-10347"
},
{
"cve": "CVE-2017-10348",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-10348"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-10348",
"url": "https://www.suse.com/security/cve/CVE-2017-10348"
},
{
"category": "external",
"summary": "SUSE Bug 1064080 for CVE-2017-10348",
"url": "https://bugzilla.suse.com/1064080"
},
{
"category": "external",
"summary": "SUSE Bug 1070162 for CVE-2017-10348",
"url": "https://bugzilla.suse.com/1070162"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2017-10348"
},
{
"cve": "CVE-2017-10349",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-10349"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: JAXP). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-10349",
"url": "https://www.suse.com/security/cve/CVE-2017-10349"
},
{
"category": "external",
"summary": "SUSE Bug 1064081 for CVE-2017-10349",
"url": "https://bugzilla.suse.com/1064081"
},
{
"category": "external",
"summary": "SUSE Bug 1070162 for CVE-2017-10349",
"url": "https://bugzilla.suse.com/1070162"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2017-10349"
},
{
"cve": "CVE-2017-10350",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-10350"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: JAX-WS). Supported versions that are affected are Java SE: 7u151, 8u144 and 9; Java SE Embedded: 8u144. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-10350",
"url": "https://www.suse.com/security/cve/CVE-2017-10350"
},
{
"category": "external",
"summary": "SUSE Bug 1064082 for CVE-2017-10350",
"url": "https://bugzilla.suse.com/1064082"
},
{
"category": "external",
"summary": "SUSE Bug 1070162 for CVE-2017-10350",
"url": "https://bugzilla.suse.com/1070162"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2017-10350"
},
{
"cve": "CVE-2017-10355",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-10355"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Networking). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144; JRockit: R28.3.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-10355",
"url": "https://www.suse.com/security/cve/CVE-2017-10355"
},
{
"category": "external",
"summary": "SUSE Bug 1064083 for CVE-2017-10355",
"url": "https://bugzilla.suse.com/1064083"
},
{
"category": "external",
"summary": "SUSE Bug 1070162 for CVE-2017-10355",
"url": "https://bugzilla.suse.com/1070162"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2017-10355"
},
{
"cve": "CVE-2017-10356",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-10356"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144; JRockit: R28.3.15. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Java SE, Java SE Embedded, JRockit executes to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Java SE, Java SE Embedded, JRockit accessible data. Note: This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 6.2 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-10356",
"url": "https://www.suse.com/security/cve/CVE-2017-10356"
},
{
"category": "external",
"summary": "SUSE Bug 1064084 for CVE-2017-10356",
"url": "https://bugzilla.suse.com/1064084"
},
{
"category": "external",
"summary": "SUSE Bug 1070162 for CVE-2017-10356",
"url": "https://bugzilla.suse.com/1070162"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.2,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2017-10356"
},
{
"cve": "CVE-2017-10357",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-10357"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Serialization). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-10357",
"url": "https://www.suse.com/security/cve/CVE-2017-10357"
},
{
"category": "external",
"summary": "SUSE Bug 1064085 for CVE-2017-10357",
"url": "https://bugzilla.suse.com/1064085"
},
{
"category": "external",
"summary": "SUSE Bug 1070162 for CVE-2017-10357",
"url": "https://bugzilla.suse.com/1070162"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2017-10357"
},
{
"cve": "CVE-2017-10388",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-10388"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144. Difficult to exploit vulnerability allows unauthenticated attacker with network access via Kerberos to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of Java SE, Java SE Embedded. Note: Applies to the Java SE Kerberos client. CVSS 3.0 Base Score 7.5 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-10388",
"url": "https://www.suse.com/security/cve/CVE-2017-10388"
},
{
"category": "external",
"summary": "SUSE Bug 1064086 for CVE-2017-10388",
"url": "https://bugzilla.suse.com/1064086"
},
{
"category": "external",
"summary": "SUSE Bug 1070162 for CVE-2017-10388",
"url": "https://bugzilla.suse.com/1070162"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.8,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2017-10388"
},
{
"cve": "CVE-2017-3231",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-3231"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Networking). Supported versions that are affected are Java SE: 6u131, 7u121 and 8u112; Java SE Embedded: 8u111. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS v3.0 Base Score 4.3 (Confidentiality impacts).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-3231",
"url": "https://www.suse.com/security/cve/CVE-2017-3231"
},
{
"category": "external",
"summary": "SUSE Bug 1020905 for CVE-2017-3231",
"url": "https://bugzilla.suse.com/1020905"
},
{
"category": "external",
"summary": "SUSE Bug 1024218 for CVE-2017-3231",
"url": "https://bugzilla.suse.com/1024218"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2017-3231"
},
{
"cve": "CVE-2017-3241",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-3241"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: RMI). Supported versions that are affected are Java SE: 6u131, 7u121 and 8u112; Java SE Embedded: 8u111; JRockit: R28.3.12. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. While the vulnerability is in Java SE, Java SE Embedded, JRockit, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE, Java SE Embedded, JRockit. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS v3.0 Base Score 9.0 (Confidentiality, Integrity and Availability impacts).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-3241",
"url": "https://www.suse.com/security/cve/CVE-2017-3241"
},
{
"category": "external",
"summary": "SUSE Bug 1020905 for CVE-2017-3241",
"url": "https://bugzilla.suse.com/1020905"
},
{
"category": "external",
"summary": "SUSE Bug 1024218 for CVE-2017-3241",
"url": "https://bugzilla.suse.com/1024218"
},
{
"category": "external",
"summary": "SUSE Bug 1163365 for CVE-2017-3241",
"url": "https://bugzilla.suse.com/1163365"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-3241"
},
{
"cve": "CVE-2017-3252",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-3252"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JAAS). Supported versions that are affected are Java SE: 6u131, 7u121 and 8u112; Java SE Embedded: 8u111; JRockit: R28.3.12. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, Java SE Embedded, JRockit, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Java SE, Java SE Embedded, JRockit accessible data. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS v3.0 Base Score 5.8 (Integrity impacts).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-3252",
"url": "https://www.suse.com/security/cve/CVE-2017-3252"
},
{
"category": "external",
"summary": "SUSE Bug 1020905 for CVE-2017-3252",
"url": "https://bugzilla.suse.com/1020905"
},
{
"category": "external",
"summary": "SUSE Bug 1024218 for CVE-2017-3252",
"url": "https://bugzilla.suse.com/1024218"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.8,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:C/C:N/I:H/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-3252"
},
{
"cve": "CVE-2017-3253",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-3253"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: 2D). Supported versions that are affected are Java SE: 6u131, 7u121 and 8u112; Java SE Embedded: 8u111; JRockit: R28.3.12. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Java SE, Java SE Embedded, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS v3.0 Base Score 7.5 (Availability impacts).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-3253",
"url": "https://www.suse.com/security/cve/CVE-2017-3253"
},
{
"category": "external",
"summary": "SUSE Bug 1020905 for CVE-2017-3253",
"url": "https://bugzilla.suse.com/1020905"
},
{
"category": "external",
"summary": "SUSE Bug 1024218 for CVE-2017-3253",
"url": "https://bugzilla.suse.com/1024218"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-3253"
},
{
"cve": "CVE-2017-3260",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-3260"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE component of Oracle Java SE (subcomponent: AWT). Supported versions that are affected are Java SE: 7u121 and 8u112. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS v3.0 Base Score 8.3 (Confidentiality, Integrity and Availability impacts).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-3260",
"url": "https://www.suse.com/security/cve/CVE-2017-3260"
},
{
"category": "external",
"summary": "SUSE Bug 1020905 for CVE-2017-3260",
"url": "https://bugzilla.suse.com/1020905"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.3,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2017-3260"
},
{
"cve": "CVE-2017-3261",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-3261"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Networking). Supported versions that are affected are Java SE: 6u131, 7u121 and 8u112; Java SE Embedded: 8u111. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS v3.0 Base Score 4.3 (Confidentiality impacts).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-3261",
"url": "https://www.suse.com/security/cve/CVE-2017-3261"
},
{
"category": "external",
"summary": "SUSE Bug 1020905 for CVE-2017-3261",
"url": "https://bugzilla.suse.com/1020905"
},
{
"category": "external",
"summary": "SUSE Bug 1024218 for CVE-2017-3261",
"url": "https://bugzilla.suse.com/1024218"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2017-3261"
},
{
"cve": "CVE-2017-3272",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-3272"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries). Supported versions that are affected are Java SE: 6u131, 7u121 and 8u112; Java SE Embedded: 8u111. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, Java SE Embedded, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS v3.0 Base Score 9.6 (Confidentiality, Integrity and Availability impacts).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-3272",
"url": "https://www.suse.com/security/cve/CVE-2017-3272"
},
{
"category": "external",
"summary": "SUSE Bug 1020905 for CVE-2017-3272",
"url": "https://bugzilla.suse.com/1020905"
},
{
"category": "external",
"summary": "SUSE Bug 1024218 for CVE-2017-3272",
"url": "https://bugzilla.suse.com/1024218"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.6,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-3272"
},
{
"cve": "CVE-2017-3289",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-3289"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Hotspot). Supported versions that are affected are Java SE: 7u121 and 8u112; Java SE Embedded: 8u111. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, Java SE Embedded, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS v3.0 Base Score 9.6 (Confidentiality, Integrity and Availability impacts).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-3289",
"url": "https://www.suse.com/security/cve/CVE-2017-3289"
},
{
"category": "external",
"summary": "SUSE Bug 1020905 for CVE-2017-3289",
"url": "https://bugzilla.suse.com/1020905"
},
{
"category": "external",
"summary": "SUSE Bug 1024218 for CVE-2017-3289",
"url": "https://bugzilla.suse.com/1024218"
},
{
"category": "external",
"summary": "SUSE Bug 1163365 for CVE-2017-3289",
"url": "https://bugzilla.suse.com/1163365"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.6,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2017-3289"
},
{
"cve": "CVE-2017-3509",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-3509"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Networking). Supported versions that are affected are Java SE: 6u141, 7u131 and 8u121; Java SE Embedded: 8u121. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded accessible data as well as unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 4.2 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-3509",
"url": "https://www.suse.com/security/cve/CVE-2017-3509"
},
{
"category": "external",
"summary": "SUSE Bug 1034849 for CVE-2017-3509",
"url": "https://bugzilla.suse.com/1034849"
},
{
"category": "external",
"summary": "SUSE Bug 1038505 for CVE-2017-3509",
"url": "https://bugzilla.suse.com/1038505"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.2,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2017-3509"
},
{
"cve": "CVE-2017-3511",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-3511"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JCE). Supported versions that are affected are Java SE: 7u131 and 8u121; Java SE Embedded: 8u121; JRockit: R28.3.13. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Java SE, Java SE Embedded, JRockit executes to compromise Java SE, Java SE Embedded, JRockit. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, Java SE Embedded, JRockit, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE, Java SE Embedded, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 7.7 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-3511",
"url": "https://www.suse.com/security/cve/CVE-2017-3511"
},
{
"category": "external",
"summary": "SUSE Bug 1034849 for CVE-2017-3511",
"url": "https://bugzilla.suse.com/1034849"
},
{
"category": "external",
"summary": "SUSE Bug 1038505 for CVE-2017-3511",
"url": "https://bugzilla.suse.com/1038505"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-3511"
},
{
"cve": "CVE-2017-3512",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-3512"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE component of Oracle Java SE (subcomponent: AWT). Supported versions that are affected are Java SE: 7u131 and 8u121. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 8.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-3512",
"url": "https://www.suse.com/security/cve/CVE-2017-3512"
},
{
"category": "external",
"summary": "SUSE Bug 1034849 for CVE-2017-3512",
"url": "https://bugzilla.suse.com/1034849"
},
{
"category": "external",
"summary": "SUSE Bug 1038505 for CVE-2017-3512",
"url": "https://bugzilla.suse.com/1038505"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.3,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2017-3512"
},
{
"cve": "CVE-2017-3514",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-3514"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE component of Oracle Java SE (subcomponent: AWT). Supported versions that are affected are Java SE: 6u141, 7u131 and 8u121. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 8.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-3514",
"url": "https://www.suse.com/security/cve/CVE-2017-3514"
},
{
"category": "external",
"summary": "SUSE Bug 1034849 for CVE-2017-3514",
"url": "https://bugzilla.suse.com/1034849"
},
{
"category": "external",
"summary": "SUSE Bug 1038505 for CVE-2017-3514",
"url": "https://bugzilla.suse.com/1038505"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.3,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2017-3514"
},
{
"cve": "CVE-2017-3526",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-3526"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JAXP). Supported versions that are affected are Java SE: 6u141, 7u131 and 8u121; Java SE Embedded: 8u121; JRockit: R28.3.13. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Java SE, Java SE Embedded, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 5.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-3526",
"url": "https://www.suse.com/security/cve/CVE-2017-3526"
},
{
"category": "external",
"summary": "SUSE Bug 1034849 for CVE-2017-3526",
"url": "https://bugzilla.suse.com/1034849"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-3526"
},
{
"cve": "CVE-2017-3533",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-3533"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Networking). Supported versions that are affected are Java SE: 6u141, 7u131 and 8u121; Java SE Embedded: 8u121; JRockit: R28.3.13. Difficult to exploit vulnerability allows unauthenticated attacker with network access via FTP to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded, JRockit accessible data. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 3.7 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-3533",
"url": "https://www.suse.com/security/cve/CVE-2017-3533"
},
{
"category": "external",
"summary": "SUSE Bug 1034849 for CVE-2017-3533",
"url": "https://bugzilla.suse.com/1034849"
},
{
"category": "external",
"summary": "SUSE Bug 1038505 for CVE-2017-3533",
"url": "https://bugzilla.suse.com/1038505"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2017-3533"
},
{
"cve": "CVE-2017-3539",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-3539"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u141, 7u131 and 8u121; Java SE Embedded: 8u121. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 3.1 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-3539",
"url": "https://www.suse.com/security/cve/CVE-2017-3539"
},
{
"category": "external",
"summary": "SUSE Bug 1005522 for CVE-2017-3539",
"url": "https://bugzilla.suse.com/1005522"
},
{
"category": "external",
"summary": "SUSE Bug 1034849 for CVE-2017-3539",
"url": "https://bugzilla.suse.com/1034849"
},
{
"category": "external",
"summary": "SUSE Bug 1038505 for CVE-2017-3539",
"url": "https://bugzilla.suse.com/1038505"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.1,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2017-3539"
},
{
"cve": "CVE-2017-3544",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-3544"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Networking). Supported versions that are affected are Java SE: 6u141, 7u131 and 8u121; Java SE Embedded: 8u121; JRockit: R28.3.13. Difficult to exploit vulnerability allows unauthenticated attacker with network access via SMTP to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded, JRockit accessible data. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 3.7 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-3544",
"url": "https://www.suse.com/security/cve/CVE-2017-3544"
},
{
"category": "external",
"summary": "SUSE Bug 1034849 for CVE-2017-3544",
"url": "https://bugzilla.suse.com/1034849"
},
{
"category": "external",
"summary": "SUSE Bug 1038505 for CVE-2017-3544",
"url": "https://bugzilla.suse.com/1038505"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-3544"
},
{
"cve": "CVE-2018-11212",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-11212"
}
],
"notes": [
{
"category": "general",
"text": "An issue was discovered in libjpeg 9a and 9d. The alloc_sarray function in jmemmgr.c allows remote attackers to cause a denial of service (divide-by-zero error) via a crafted file.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-11212",
"url": "https://www.suse.com/security/cve/CVE-2018-11212"
},
{
"category": "external",
"summary": "SUSE Bug 1122299 for CVE-2018-11212",
"url": "https://bugzilla.suse.com/1122299"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2018-11212"
},
{
"cve": "CVE-2018-13785",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-13785"
}
],
"notes": [
{
"category": "general",
"text": "In libpng 1.6.34, a wrong calculation of row_factor in the png_check_chunk_length function (pngrutil.c) may trigger an integer overflow and resultant divide-by-zero while processing a crafted PNG file, leading to a denial of service.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-13785",
"url": "https://www.suse.com/security/cve/CVE-2018-13785"
},
{
"category": "external",
"summary": "SUSE Bug 1100687 for CVE-2018-13785",
"url": "https://bugzilla.suse.com/1100687"
},
{
"category": "external",
"summary": "SUSE Bug 1112153 for CVE-2018-13785",
"url": "https://bugzilla.suse.com/1112153"
},
{
"category": "external",
"summary": "SUSE Bug 1116574 for CVE-2018-13785",
"url": "https://bugzilla.suse.com/1116574"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2018-13785"
},
{
"cve": "CVE-2018-16435",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-16435"
}
],
"notes": [
{
"category": "general",
"text": "Little CMS (aka Little Color Management System) 2.9 has an integer overflow in the AllocateDataSet function in cmscgats.c, leading to a heap-based buffer overflow in the SetData function via a crafted file in the second argument to cmsIT8LoadFromFile.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-16435",
"url": "https://www.suse.com/security/cve/CVE-2018-16435"
},
{
"category": "external",
"summary": "SUSE Bug 1108813 for CVE-2018-16435",
"url": "https://bugzilla.suse.com/1108813"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-16435"
},
{
"cve": "CVE-2018-2579",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-2579"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Libraries). Supported versions that are affected are Java SE: 6u171, 7u161, 8u152 and 9.0.1; Java SE Embedded: 8u151; JRockit: R28.3.16. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE, Java SE Embedded, JRockit accessible data. Note: This vulnerability applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 3.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-2579",
"url": "https://www.suse.com/security/cve/CVE-2018-2579"
},
{
"category": "external",
"summary": "SUSE Bug 1076366 for CVE-2018-2579",
"url": "https://bugzilla.suse.com/1076366"
},
{
"category": "external",
"summary": "SUSE Bug 1082810 for CVE-2018-2579",
"url": "https://bugzilla.suse.com/1082810"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2018-2579"
},
{
"cve": "CVE-2018-2582",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-2582"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Hotspot). Supported versions that are affected are Java SE: 8u152 and 9.0.1; Java SE Embedded: 8u151. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 6.5 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-2582",
"url": "https://www.suse.com/security/cve/CVE-2018-2582"
},
{
"category": "external",
"summary": "SUSE Bug 1076366 for CVE-2018-2582",
"url": "https://bugzilla.suse.com/1076366"
},
{
"category": "external",
"summary": "SUSE Bug 1082810 for CVE-2018-2582",
"url": "https://bugzilla.suse.com/1082810"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-2582"
},
{
"cve": "CVE-2018-2588",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-2588"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: LDAP). Supported versions that are affected are Java SE: 6u171, 7u161, 8u152 and 9.0.1; Java SE Embedded: 8u151; JRockit: R28.3.16. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE, Java SE Embedded, JRockit accessible data. Note: This vulnerability applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 4.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-2588",
"url": "https://www.suse.com/security/cve/CVE-2018-2588"
},
{
"category": "external",
"summary": "SUSE Bug 1076366 for CVE-2018-2588",
"url": "https://bugzilla.suse.com/1076366"
},
{
"category": "external",
"summary": "SUSE Bug 1082810 for CVE-2018-2588",
"url": "https://bugzilla.suse.com/1082810"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-2588"
},
{
"cve": "CVE-2018-2599",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-2599"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JNDI). Supported versions that are affected are Java SE: 6u171, 7u161, 8u152 and 9.0.1; Java SE Embedded: 8u151; JRockit: R28.3.16. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded, JRockit accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: This vulnerability applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 4.8 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-2599",
"url": "https://www.suse.com/security/cve/CVE-2018-2599"
},
{
"category": "external",
"summary": "SUSE Bug 1076366 for CVE-2018-2599",
"url": "https://bugzilla.suse.com/1076366"
},
{
"category": "external",
"summary": "SUSE Bug 1082810 for CVE-2018-2599",
"url": "https://bugzilla.suse.com/1082810"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.8,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-2599"
},
{
"cve": "CVE-2018-2602",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-2602"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: I18n). Supported versions that are affected are Java SE: 6u171, 7u161, 8u152 and 9.0.1; Java SE Embedded: 8u151. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Java SE, Java SE Embedded executes to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded accessible data as well as unauthorized read access to a subset of Java SE, Java SE Embedded accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 4.5 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-2602",
"url": "https://www.suse.com/security/cve/CVE-2018-2602"
},
{
"category": "external",
"summary": "SUSE Bug 1076366 for CVE-2018-2602",
"url": "https://bugzilla.suse.com/1076366"
},
{
"category": "external",
"summary": "SUSE Bug 1082810 for CVE-2018-2602",
"url": "https://bugzilla.suse.com/1082810"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-2602"
},
{
"cve": "CVE-2018-2603",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-2603"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Libraries). Supported versions that are affected are Java SE: 6u171, 7u161, 8u152 and 9.0.1; Java SE Embedded: 8u151; JRockit: R28.3.16. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: This vulnerability applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-2603",
"url": "https://www.suse.com/security/cve/CVE-2018-2603"
},
{
"category": "external",
"summary": "SUSE Bug 1076366 for CVE-2018-2603",
"url": "https://bugzilla.suse.com/1076366"
},
{
"category": "external",
"summary": "SUSE Bug 1082810 for CVE-2018-2603",
"url": "https://bugzilla.suse.com/1082810"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-2603"
},
{
"cve": "CVE-2018-2618",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-2618"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JCE). Supported versions that are affected are Java SE: 6u171, 7u161, 8u152 and 9.0.1; Java SE Embedded: 8u151; JRockit: R28.3.16. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Java SE, Java SE Embedded, JRockit accessible data. Note: This vulnerability applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 5.9 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-2618",
"url": "https://www.suse.com/security/cve/CVE-2018-2618"
},
{
"category": "external",
"summary": "SUSE Bug 1076366 for CVE-2018-2618",
"url": "https://bugzilla.suse.com/1076366"
},
{
"category": "external",
"summary": "SUSE Bug 1082810 for CVE-2018-2618",
"url": "https://bugzilla.suse.com/1082810"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-2618"
},
{
"cve": "CVE-2018-2629",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-2629"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JGSS). Supported versions that are affected are Java SE: 6u171, 7u161, 8u152 and 9.0.1; Java SE Embedded: 8u151; JRockit: R28.3.16. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Java SE, Java SE Embedded, JRockit accessible data. Note: This vulnerability applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 5.3 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-2629",
"url": "https://www.suse.com/security/cve/CVE-2018-2629"
},
{
"category": "external",
"summary": "SUSE Bug 1076366 for CVE-2018-2629",
"url": "https://bugzilla.suse.com/1076366"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-2629"
},
{
"cve": "CVE-2018-2633",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-2633"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JNDI). Supported versions that are affected are Java SE: 6u171, 7u161, 8u152 and 9.0.1; Java SE Embedded: 8u151; JRockit: R28.3.16. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, Java SE Embedded, JRockit, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE, Java SE Embedded, JRockit. Note: This vulnerability applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 8.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-2633",
"url": "https://www.suse.com/security/cve/CVE-2018-2633"
},
{
"category": "external",
"summary": "SUSE Bug 1076366 for CVE-2018-2633",
"url": "https://bugzilla.suse.com/1076366"
},
{
"category": "external",
"summary": "SUSE Bug 1082810 for CVE-2018-2633",
"url": "https://bugzilla.suse.com/1082810"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.3,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-2633"
},
{
"cve": "CVE-2018-2634",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-2634"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: JGSS). Supported versions that are affected are Java SE: 7u161, 8u152 and 9.0.1; Java SE Embedded: 8u151. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. While the vulnerability is in Java SE, Java SE Embedded, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 6.8 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-2634",
"url": "https://www.suse.com/security/cve/CVE-2018-2634"
},
{
"category": "external",
"summary": "SUSE Bug 1076366 for CVE-2018-2634",
"url": "https://bugzilla.suse.com/1076366"
},
{
"category": "external",
"summary": "SUSE Bug 1082810 for CVE-2018-2634",
"url": "https://bugzilla.suse.com/1082810"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.8,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-2634"
},
{
"cve": "CVE-2018-2637",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-2637"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JMX). Supported versions that are affected are Java SE: 6u171, 7u161, 8u152 and 9.0.1; Java SE Embedded: 8u151; JRockit: R28.3.16. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Java SE, Java SE Embedded, JRockit accessible data as well as unauthorized access to critical data or complete access to all Java SE, Java SE Embedded, JRockit accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.0 Base Score 7.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-2637",
"url": "https://www.suse.com/security/cve/CVE-2018-2637"
},
{
"category": "external",
"summary": "SUSE Bug 1076366 for CVE-2018-2637",
"url": "https://bugzilla.suse.com/1076366"
},
{
"category": "external",
"summary": "SUSE Bug 1082810 for CVE-2018-2637",
"url": "https://bugzilla.suse.com/1082810"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.4,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-2637"
},
{
"cve": "CVE-2018-2641",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-2641"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: AWT). Supported versions that are affected are Java SE: 6u171, 7u161, 8u152 and 9.0.1; Java SE Embedded: 8u151. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, Java SE Embedded, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 6.1 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:H/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-2641",
"url": "https://www.suse.com/security/cve/CVE-2018-2641"
},
{
"category": "external",
"summary": "SUSE Bug 1076366 for CVE-2018-2641",
"url": "https://bugzilla.suse.com/1076366"
},
{
"category": "external",
"summary": "SUSE Bug 1082810 for CVE-2018-2641",
"url": "https://bugzilla.suse.com/1082810"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:H/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-2641"
},
{
"cve": "CVE-2018-2663",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-2663"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Libraries). Supported versions that are affected are Java SE: 6u171, 7u161, 8u152 and 9.0.1; Java SE Embedded: 8u151; JRockit: R28.3.16. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: This vulnerability applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 4.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-2663",
"url": "https://www.suse.com/security/cve/CVE-2018-2663"
},
{
"category": "external",
"summary": "SUSE Bug 1076366 for CVE-2018-2663",
"url": "https://bugzilla.suse.com/1076366"
},
{
"category": "external",
"summary": "SUSE Bug 1082810 for CVE-2018-2663",
"url": "https://bugzilla.suse.com/1082810"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-2663"
},
{
"cve": "CVE-2018-2677",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-2677"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: AWT). Supported versions that are affected are Java SE: 6u171, 7u161, 8u152 and 9.0.1; Java SE Embedded: 8u151. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 4.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-2677",
"url": "https://www.suse.com/security/cve/CVE-2018-2677"
},
{
"category": "external",
"summary": "SUSE Bug 1076366 for CVE-2018-2677",
"url": "https://bugzilla.suse.com/1076366"
},
{
"category": "external",
"summary": "SUSE Bug 1082810 for CVE-2018-2677",
"url": "https://bugzilla.suse.com/1082810"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-2677"
},
{
"cve": "CVE-2018-2678",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-2678"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JNDI). Supported versions that are affected are Java SE: 6u171, 7u161, 8u152 and 9.0.1; Java SE Embedded: 8u151; JRockit: R28.3.16. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: This vulnerability applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 4.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-2678",
"url": "https://www.suse.com/security/cve/CVE-2018-2678"
},
{
"category": "external",
"summary": "SUSE Bug 1076366 for CVE-2018-2678",
"url": "https://bugzilla.suse.com/1076366"
},
{
"category": "external",
"summary": "SUSE Bug 1082810 for CVE-2018-2678",
"url": "https://bugzilla.suse.com/1082810"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-2678"
},
{
"cve": "CVE-2018-2790",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-2790"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u181, 7u171, 8u162 and 10; Java SE Embedded: 8u161. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 3.1 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-2790",
"url": "https://www.suse.com/security/cve/CVE-2018-2790"
},
{
"category": "external",
"summary": "SUSE Bug 1090023 for CVE-2018-2790",
"url": "https://bugzilla.suse.com/1090023"
},
{
"category": "external",
"summary": "SUSE Bug 1093311 for CVE-2018-2790",
"url": "https://bugzilla.suse.com/1093311"
},
{
"category": "external",
"summary": "SUSE Bug 1101637 for CVE-2018-2790",
"url": "https://bugzilla.suse.com/1101637"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.1,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2018-2790"
},
{
"cve": "CVE-2018-2794",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-2794"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, JRockit component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u181, 7u171, 8u162, 10 and JRockit: R28.3.17. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Java SE, JRockit executes to compromise Java SE, JRockit. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, JRockit, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 7.7 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-2794",
"url": "https://www.suse.com/security/cve/CVE-2018-2794"
},
{
"category": "external",
"summary": "SUSE Bug 1090024 for CVE-2018-2794",
"url": "https://bugzilla.suse.com/1090024"
},
{
"category": "external",
"summary": "SUSE Bug 1093311 for CVE-2018-2794",
"url": "https://bugzilla.suse.com/1093311"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-2794"
},
{
"cve": "CVE-2018-2795",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-2795"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u181, 7u171, 8u162 and 10; Java SE Embedded: 8u161; JRockit: R28.3.17. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-2795",
"url": "https://www.suse.com/security/cve/CVE-2018-2795"
},
{
"category": "external",
"summary": "SUSE Bug 1090025 for CVE-2018-2795",
"url": "https://bugzilla.suse.com/1090025"
},
{
"category": "external",
"summary": "SUSE Bug 1093311 for CVE-2018-2795",
"url": "https://bugzilla.suse.com/1093311"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-2795"
},
{
"cve": "CVE-2018-2796",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-2796"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Concurrency). Supported versions that are affected are Java SE: 7u171, 8u162 and 10; Java SE Embedded: 8u161; JRockit: R28.3.17. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-2796",
"url": "https://www.suse.com/security/cve/CVE-2018-2796"
},
{
"category": "external",
"summary": "SUSE Bug 1090026 for CVE-2018-2796",
"url": "https://bugzilla.suse.com/1090026"
},
{
"category": "external",
"summary": "SUSE Bug 1093311 for CVE-2018-2796",
"url": "https://bugzilla.suse.com/1093311"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-2796"
},
{
"cve": "CVE-2018-2797",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-2797"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JMX). Supported versions that are affected are Java SE: 6u181, 7u171, 8u162 and 10; Java SE Embedded: 8u161; JRockit: R28.3.17. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-2797",
"url": "https://www.suse.com/security/cve/CVE-2018-2797"
},
{
"category": "external",
"summary": "SUSE Bug 1090027 for CVE-2018-2797",
"url": "https://bugzilla.suse.com/1090027"
},
{
"category": "external",
"summary": "SUSE Bug 1093311 for CVE-2018-2797",
"url": "https://bugzilla.suse.com/1093311"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-2797"
},
{
"cve": "CVE-2018-2798",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-2798"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: AWT). Supported versions that are affected are Java SE: 6u181, 7u171, 8u162 and 10; Java SE Embedded: 8u161; JRockit: R28.3.17. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-2798",
"url": "https://www.suse.com/security/cve/CVE-2018-2798"
},
{
"category": "external",
"summary": "SUSE Bug 1090028 for CVE-2018-2798",
"url": "https://bugzilla.suse.com/1090028"
},
{
"category": "external",
"summary": "SUSE Bug 1093311 for CVE-2018-2798",
"url": "https://bugzilla.suse.com/1093311"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-2798"
},
{
"cve": "CVE-2018-2799",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-2799"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JAXP). Supported versions that are affected are Java SE: 7u171, 8u162 and 10; Java SE Embedded: 8u161; JRockit: R28.3.17. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-2799",
"url": "https://www.suse.com/security/cve/CVE-2018-2799"
},
{
"category": "external",
"summary": "SUSE Bug 1090029 for CVE-2018-2799",
"url": "https://bugzilla.suse.com/1090029"
},
{
"category": "external",
"summary": "SUSE Bug 1093311 for CVE-2018-2799",
"url": "https://bugzilla.suse.com/1093311"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-2799"
},
{
"cve": "CVE-2018-2800",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-2800"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, JRockit component of Oracle Java SE (subcomponent: RMI). Supported versions that are affected are Java SE: 6u181, 7u171 and 8u162; JRockit: R28.3.17. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, JRockit. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, JRockit accessible data as well as unauthorized read access to a subset of Java SE, JRockit accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.0 Base Score 4.2 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-2800",
"url": "https://www.suse.com/security/cve/CVE-2018-2800"
},
{
"category": "external",
"summary": "SUSE Bug 1090030 for CVE-2018-2800",
"url": "https://bugzilla.suse.com/1090030"
},
{
"category": "external",
"summary": "SUSE Bug 1093311 for CVE-2018-2800",
"url": "https://bugzilla.suse.com/1093311"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.2,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-2800"
},
{
"cve": "CVE-2018-2814",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-2814"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Hotspot). Supported versions that are affected are Java SE: 6u181, 7u171, 8u162 and 10; Java SE Embedded: 8u161. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, Java SE Embedded, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 8.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-2814",
"url": "https://www.suse.com/security/cve/CVE-2018-2814"
},
{
"category": "external",
"summary": "SUSE Bug 1090032 for CVE-2018-2814",
"url": "https://bugzilla.suse.com/1090032"
},
{
"category": "external",
"summary": "SUSE Bug 1093311 for CVE-2018-2814",
"url": "https://bugzilla.suse.com/1093311"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-2814"
},
{
"cve": "CVE-2018-2815",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-2815"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Serialization). Supported versions that are affected are Java SE: 6u181, 7u171, 8u162 and 10; Java SE Embedded: 8u161; JRockit: R28.3.17. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-2815",
"url": "https://www.suse.com/security/cve/CVE-2018-2815"
},
{
"category": "external",
"summary": "SUSE Bug 1090033 for CVE-2018-2815",
"url": "https://bugzilla.suse.com/1090033"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-2815"
},
{
"cve": "CVE-2018-2938",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-2938"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Java DB). Supported versions that are affected are Java SE: 6u191, 7u181 and 8u172. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. While the vulnerability is in Java SE, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVE-2018-2938 addresses CVE-2018-1313. CVSS 3.0 Base Score 9.0 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-2938",
"url": "https://www.suse.com/security/cve/CVE-2018-2938"
},
{
"category": "external",
"summary": "SUSE Bug 1101644 for CVE-2018-2938",
"url": "https://bugzilla.suse.com/1101644"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-2938"
},
{
"cve": "CVE-2018-2940",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-2940"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries). Supported versions that are affected are Java SE: 6u191, 7u181, 8u172 and 10.0.1; Java SE Embedded: 8u171. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 4.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-2940",
"url": "https://www.suse.com/security/cve/CVE-2018-2940"
},
{
"category": "external",
"summary": "SUSE Bug 1101645 for CVE-2018-2940",
"url": "https://bugzilla.suse.com/1101645"
},
{
"category": "external",
"summary": "SUSE Bug 1101656 for CVE-2018-2940",
"url": "https://bugzilla.suse.com/1101656"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-2940"
},
{
"cve": "CVE-2018-2952",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-2952"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Concurrency). Supported versions that are affected are Java SE: 6u191, 7u181, 8u172 and 10.0.1; Java SE Embedded: 8u171; JRockit: R28.3.18. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 3.7 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-2952",
"url": "https://www.suse.com/security/cve/CVE-2018-2952"
},
{
"category": "external",
"summary": "SUSE Bug 1101645 for CVE-2018-2952",
"url": "https://bugzilla.suse.com/1101645"
},
{
"category": "external",
"summary": "SUSE Bug 1101651 for CVE-2018-2952",
"url": "https://bugzilla.suse.com/1101651"
},
{
"category": "external",
"summary": "SUSE Bug 1101656 for CVE-2018-2952",
"url": "https://bugzilla.suse.com/1101656"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-2952"
},
{
"cve": "CVE-2018-2973",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-2973"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: JSSE). Supported versions that are affected are Java SE: 6u191, 7u181, 8u172 and 10.0.1; Java SE Embedded: 8u171. Difficult to exploit vulnerability allows unauthenticated attacker with network access via SSL/TLS to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 5.9 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-2973",
"url": "https://www.suse.com/security/cve/CVE-2018-2973"
},
{
"category": "external",
"summary": "SUSE Bug 1101645 for CVE-2018-2973",
"url": "https://bugzilla.suse.com/1101645"
},
{
"category": "external",
"summary": "SUSE Bug 1101656 for CVE-2018-2973",
"url": "https://bugzilla.suse.com/1101656"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-2973"
},
{
"cve": "CVE-2018-3136",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-3136"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u201, 7u191, 8u182 and 11; Java SE Embedded: 8u181. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, Java SE Embedded, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g. code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g. code installed by an administrator). CVSS 3.0 Base Score 3.4 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:L/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-3136",
"url": "https://www.suse.com/security/cve/CVE-2018-3136"
},
{
"category": "external",
"summary": "SUSE Bug 1112142 for CVE-2018-3136",
"url": "https://bugzilla.suse.com/1112142"
},
{
"category": "external",
"summary": "SUSE Bug 1112143 for CVE-2018-3136",
"url": "https://bugzilla.suse.com/1112143"
},
{
"category": "external",
"summary": "SUSE Bug 1112144 for CVE-2018-3136",
"url": "https://bugzilla.suse.com/1112144"
},
{
"category": "external",
"summary": "SUSE Bug 1112146 for CVE-2018-3136",
"url": "https://bugzilla.suse.com/1112146"
},
{
"category": "external",
"summary": "SUSE Bug 1112148 for CVE-2018-3136",
"url": "https://bugzilla.suse.com/1112148"
},
{
"category": "external",
"summary": "SUSE Bug 1112152 for CVE-2018-3136",
"url": "https://bugzilla.suse.com/1112152"
},
{
"category": "external",
"summary": "SUSE Bug 1116574 for CVE-2018-3136",
"url": "https://bugzilla.suse.com/1116574"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.1,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-3136"
},
{
"cve": "CVE-2018-3139",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-3139"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Networking). Supported versions that are affected are Java SE: 6u201, 7u191, 8u182 and 11; Java SE Embedded: 8u181. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g. code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g. code installed by an administrator). CVSS 3.0 Base Score 3.1 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-3139",
"url": "https://www.suse.com/security/cve/CVE-2018-3139"
},
{
"category": "external",
"summary": "SUSE Bug 1112142 for CVE-2018-3139",
"url": "https://bugzilla.suse.com/1112142"
},
{
"category": "external",
"summary": "SUSE Bug 1112143 for CVE-2018-3139",
"url": "https://bugzilla.suse.com/1112143"
},
{
"category": "external",
"summary": "SUSE Bug 1112144 for CVE-2018-3139",
"url": "https://bugzilla.suse.com/1112144"
},
{
"category": "external",
"summary": "SUSE Bug 1112146 for CVE-2018-3139",
"url": "https://bugzilla.suse.com/1112146"
},
{
"category": "external",
"summary": "SUSE Bug 1112148 for CVE-2018-3139",
"url": "https://bugzilla.suse.com/1112148"
},
{
"category": "external",
"summary": "SUSE Bug 1112152 for CVE-2018-3139",
"url": "https://bugzilla.suse.com/1112152"
},
{
"category": "external",
"summary": "SUSE Bug 1116574 for CVE-2018-3139",
"url": "https://bugzilla.suse.com/1116574"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.1,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-3139"
},
{
"cve": "CVE-2018-3149",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-3149"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JNDI). Supported versions that are affected are Java SE: 6u201, 7u191, 8u182 and 11; Java SE Embedded: 8u181; JRockit: R28.3.19. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, Java SE Embedded, JRockit, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE, Java SE Embedded, JRockit. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g. code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g. through a web service which supplies data to the APIs. CVSS 3.0 Base Score 8.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-3149",
"url": "https://www.suse.com/security/cve/CVE-2018-3149"
},
{
"category": "external",
"summary": "SUSE Bug 1112142 for CVE-2018-3149",
"url": "https://bugzilla.suse.com/1112142"
},
{
"category": "external",
"summary": "SUSE Bug 1112143 for CVE-2018-3149",
"url": "https://bugzilla.suse.com/1112143"
},
{
"category": "external",
"summary": "SUSE Bug 1112144 for CVE-2018-3149",
"url": "https://bugzilla.suse.com/1112144"
},
{
"category": "external",
"summary": "SUSE Bug 1112146 for CVE-2018-3149",
"url": "https://bugzilla.suse.com/1112146"
},
{
"category": "external",
"summary": "SUSE Bug 1112148 for CVE-2018-3149",
"url": "https://bugzilla.suse.com/1112148"
},
{
"category": "external",
"summary": "SUSE Bug 1112152 for CVE-2018-3149",
"url": "https://bugzilla.suse.com/1112152"
},
{
"category": "external",
"summary": "SUSE Bug 1116574 for CVE-2018-3149",
"url": "https://bugzilla.suse.com/1116574"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.3,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-3149"
},
{
"cve": "CVE-2018-3169",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-3169"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Hotspot). Supported versions that are affected are Java SE: 7u191, 8u182 and 11; Java SE Embedded: 8u181. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, Java SE Embedded, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g. code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g. code installed by an administrator). CVSS 3.0 Base Score 8.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-3169",
"url": "https://www.suse.com/security/cve/CVE-2018-3169"
},
{
"category": "external",
"summary": "SUSE Bug 1112142 for CVE-2018-3169",
"url": "https://bugzilla.suse.com/1112142"
},
{
"category": "external",
"summary": "SUSE Bug 1112143 for CVE-2018-3169",
"url": "https://bugzilla.suse.com/1112143"
},
{
"category": "external",
"summary": "SUSE Bug 1112144 for CVE-2018-3169",
"url": "https://bugzilla.suse.com/1112144"
},
{
"category": "external",
"summary": "SUSE Bug 1112146 for CVE-2018-3169",
"url": "https://bugzilla.suse.com/1112146"
},
{
"category": "external",
"summary": "SUSE Bug 1112148 for CVE-2018-3169",
"url": "https://bugzilla.suse.com/1112148"
},
{
"category": "external",
"summary": "SUSE Bug 1112152 for CVE-2018-3169",
"url": "https://bugzilla.suse.com/1112152"
},
{
"category": "external",
"summary": "SUSE Bug 1116574 for CVE-2018-3169",
"url": "https://bugzilla.suse.com/1116574"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.3,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-3169"
},
{
"cve": "CVE-2018-3180",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-3180"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JSSE). Supported versions that are affected are Java SE: 6u201, 7u191, 8u182 and 11; Java SE Embedded: 8u181; JRockit: R28.3.19. Difficult to exploit vulnerability allows unauthenticated attacker with network access via SSL/TLS to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded, JRockit accessible data as well as unauthorized read access to a subset of Java SE, Java SE Embedded, JRockit accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g. code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g. through a web service which supplies data to the APIs. CVSS 3.0 Base Score 5.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-3180",
"url": "https://www.suse.com/security/cve/CVE-2018-3180"
},
{
"category": "external",
"summary": "SUSE Bug 1112142 for CVE-2018-3180",
"url": "https://bugzilla.suse.com/1112142"
},
{
"category": "external",
"summary": "SUSE Bug 1112143 for CVE-2018-3180",
"url": "https://bugzilla.suse.com/1112143"
},
{
"category": "external",
"summary": "SUSE Bug 1112144 for CVE-2018-3180",
"url": "https://bugzilla.suse.com/1112144"
},
{
"category": "external",
"summary": "SUSE Bug 1112146 for CVE-2018-3180",
"url": "https://bugzilla.suse.com/1112146"
},
{
"category": "external",
"summary": "SUSE Bug 1112147 for CVE-2018-3180",
"url": "https://bugzilla.suse.com/1112147"
},
{
"category": "external",
"summary": "SUSE Bug 1112148 for CVE-2018-3180",
"url": "https://bugzilla.suse.com/1112148"
},
{
"category": "external",
"summary": "SUSE Bug 1112152 for CVE-2018-3180",
"url": "https://bugzilla.suse.com/1112152"
},
{
"category": "external",
"summary": "SUSE Bug 1116574 for CVE-2018-3180",
"url": "https://bugzilla.suse.com/1116574"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.6,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-3180"
},
{
"cve": "CVE-2018-3183",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-3183"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Scripting). Supported versions that are affected are Java SE: 8u182 and 11; Java SE Embedded: 8u181; JRockit: R28.3.19. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. While the vulnerability is in Java SE, Java SE Embedded, JRockit, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE, Java SE Embedded, JRockit. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g. code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g. through a web service which supplies data to the APIs. CVSS 3.0 Base Score 9.0 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-3183",
"url": "https://www.suse.com/security/cve/CVE-2018-3183"
},
{
"category": "external",
"summary": "SUSE Bug 1112142 for CVE-2018-3183",
"url": "https://bugzilla.suse.com/1112142"
},
{
"category": "external",
"summary": "SUSE Bug 1112143 for CVE-2018-3183",
"url": "https://bugzilla.suse.com/1112143"
},
{
"category": "external",
"summary": "SUSE Bug 1112144 for CVE-2018-3183",
"url": "https://bugzilla.suse.com/1112144"
},
{
"category": "external",
"summary": "SUSE Bug 1112146 for CVE-2018-3183",
"url": "https://bugzilla.suse.com/1112146"
},
{
"category": "external",
"summary": "SUSE Bug 1112148 for CVE-2018-3183",
"url": "https://bugzilla.suse.com/1112148"
},
{
"category": "external",
"summary": "SUSE Bug 1112152 for CVE-2018-3183",
"url": "https://bugzilla.suse.com/1112152"
},
{
"category": "external",
"summary": "SUSE Bug 1116574 for CVE-2018-3183",
"url": "https://bugzilla.suse.com/1116574"
},
{
"category": "external",
"summary": "SUSE Bug 1120714 for CVE-2018-3183",
"url": "https://bugzilla.suse.com/1120714"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2018-3183"
},
{
"cve": "CVE-2018-3214",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-3214"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Sound). Supported versions that are affected are Java SE: 6u201, 7u191 and 8u182; Java SE Embedded: 8u181; JRockit: R28.3.19. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g. through a web service which supplies data to the APIs. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-3214",
"url": "https://www.suse.com/security/cve/CVE-2018-3214"
},
{
"category": "external",
"summary": "SUSE Bug 1112142 for CVE-2018-3214",
"url": "https://bugzilla.suse.com/1112142"
},
{
"category": "external",
"summary": "SUSE Bug 1112143 for CVE-2018-3214",
"url": "https://bugzilla.suse.com/1112143"
},
{
"category": "external",
"summary": "SUSE Bug 1112144 for CVE-2018-3214",
"url": "https://bugzilla.suse.com/1112144"
},
{
"category": "external",
"summary": "SUSE Bug 1112146 for CVE-2018-3214",
"url": "https://bugzilla.suse.com/1112146"
},
{
"category": "external",
"summary": "SUSE Bug 1112148 for CVE-2018-3214",
"url": "https://bugzilla.suse.com/1112148"
},
{
"category": "external",
"summary": "SUSE Bug 1112152 for CVE-2018-3214",
"url": "https://bugzilla.suse.com/1112152"
},
{
"category": "external",
"summary": "SUSE Bug 1116574 for CVE-2018-3214",
"url": "https://bugzilla.suse.com/1116574"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-3214"
},
{
"cve": "CVE-2018-3639",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-3639"
}
],
"notes": [
{
"category": "general",
"text": "Systems with microprocessors utilizing speculative execution and speculative execution of memory reads before the addresses of all prior memory writes are known may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis, aka Speculative Store Bypass (SSB), Variant 4.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-3639",
"url": "https://www.suse.com/security/cve/CVE-2018-3639"
},
{
"category": "external",
"summary": "SUSE Bug 1074701 for CVE-2018-3639",
"url": "https://bugzilla.suse.com/1074701"
},
{
"category": "external",
"summary": "SUSE Bug 1085235 for CVE-2018-3639",
"url": "https://bugzilla.suse.com/1085235"
},
{
"category": "external",
"summary": "SUSE Bug 1085308 for CVE-2018-3639",
"url": "https://bugzilla.suse.com/1085308"
},
{
"category": "external",
"summary": "SUSE Bug 1087078 for CVE-2018-3639",
"url": "https://bugzilla.suse.com/1087078"
},
{
"category": "external",
"summary": "SUSE Bug 1087082 for CVE-2018-3639",
"url": "https://bugzilla.suse.com/1087082"
},
{
"category": "external",
"summary": "SUSE Bug 1092631 for CVE-2018-3639",
"url": "https://bugzilla.suse.com/1092631"
},
{
"category": "external",
"summary": "SUSE Bug 1092885 for CVE-2018-3639",
"url": "https://bugzilla.suse.com/1092885"
},
{
"category": "external",
"summary": "SUSE Bug 1094912 for CVE-2018-3639",
"url": "https://bugzilla.suse.com/1094912"
},
{
"category": "external",
"summary": "SUSE Bug 1098813 for CVE-2018-3639",
"url": "https://bugzilla.suse.com/1098813"
},
{
"category": "external",
"summary": "SUSE Bug 1100394 for CVE-2018-3639",
"url": "https://bugzilla.suse.com/1100394"
},
{
"category": "external",
"summary": "SUSE Bug 1102640 for CVE-2018-3639",
"url": "https://bugzilla.suse.com/1102640"
},
{
"category": "external",
"summary": "SUSE Bug 1105412 for CVE-2018-3639",
"url": "https://bugzilla.suse.com/1105412"
},
{
"category": "external",
"summary": "SUSE Bug 1111963 for CVE-2018-3639",
"url": "https://bugzilla.suse.com/1111963"
},
{
"category": "external",
"summary": "SUSE Bug 1172781 for CVE-2018-3639",
"url": "https://bugzilla.suse.com/1172781"
},
{
"category": "external",
"summary": "SUSE Bug 1172782 for CVE-2018-3639",
"url": "https://bugzilla.suse.com/1172782"
},
{
"category": "external",
"summary": "SUSE Bug 1172783 for CVE-2018-3639",
"url": "https://bugzilla.suse.com/1172783"
},
{
"category": "external",
"summary": "SUSE Bug 1173489 for CVE-2018-3639",
"url": "https://bugzilla.suse.com/1173489"
},
{
"category": "external",
"summary": "SUSE Bug 1178658 for CVE-2018-3639",
"url": "https://bugzilla.suse.com/1178658"
},
{
"category": "external",
"summary": "SUSE Bug 1201877 for CVE-2018-3639",
"url": "https://bugzilla.suse.com/1201877"
},
{
"category": "external",
"summary": "SUSE Bug 1215674 for CVE-2018-3639",
"url": "https://bugzilla.suse.com/1215674"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-3639"
},
{
"cve": "CVE-2019-2422",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-2422"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Libraries). Supported versions that are affected are Java SE: 7u201, 8u192 and 11.0.1; Java SE Embedded: 8u191. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 3.1 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-2422",
"url": "https://www.suse.com/security/cve/CVE-2019-2422"
},
{
"category": "external",
"summary": "SUSE Bug 1122293 for CVE-2019-2422",
"url": "https://bugzilla.suse.com/1122293"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.1,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-2422"
},
{
"cve": "CVE-2019-2426",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-2426"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Networking). Supported versions that are affected are Java SE: 7u201, 8u192 and 11.0.1; Java SE Embedded: 8u191. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 3.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-2426",
"url": "https://www.suse.com/security/cve/CVE-2019-2426"
},
{
"category": "external",
"summary": "SUSE Bug 1134297 for CVE-2019-2426",
"url": "https://bugzilla.suse.com/1134297"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-2426"
},
{
"cve": "CVE-2019-2602",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-2602"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries). Supported versions that are affected are Java SE: 7u211, 8u202, 11.0.2 and 12; Java SE Embedded: 8u201. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Java SE, Java SE Embedded. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.0 Base Score 7.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-2602",
"url": "https://www.suse.com/security/cve/CVE-2019-2602"
},
{
"category": "external",
"summary": "SUSE Bug 1132728 for CVE-2019-2602",
"url": "https://bugzilla.suse.com/1132728"
},
{
"category": "external",
"summary": "SUSE Bug 1134718 for CVE-2019-2602",
"url": "https://bugzilla.suse.com/1134718"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-2602"
},
{
"cve": "CVE-2019-2684",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-2684"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: RMI). Supported versions that are affected are Java SE: 7u211, 8u202, 11.0.2 and 12; Java SE Embedded: 8u201. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 5.9 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-2684",
"url": "https://www.suse.com/security/cve/CVE-2019-2684"
},
{
"category": "external",
"summary": "SUSE Bug 1132732 for CVE-2019-2684",
"url": "https://bugzilla.suse.com/1132732"
},
{
"category": "external",
"summary": "SUSE Bug 1134718 for CVE-2019-2684",
"url": "https://bugzilla.suse.com/1134718"
},
{
"category": "external",
"summary": "SUSE Bug 1184734 for CVE-2019-2684",
"url": "https://bugzilla.suse.com/1184734"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-2684"
},
{
"cve": "CVE-2019-2698",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-2698"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE component of Oracle Java SE (subcomponent: 2D). Supported versions that are affected are Java SE: 7u211 and 8u202. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks of this vulnerability can result in takeover of Java SE. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 8.1 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-2698",
"url": "https://www.suse.com/security/cve/CVE-2019-2698"
},
{
"category": "external",
"summary": "SUSE Bug 1132729 for CVE-2019-2698",
"url": "https://bugzilla.suse.com/1132729"
},
{
"category": "external",
"summary": "SUSE Bug 1134718 for CVE-2019-2698",
"url": "https://bugzilla.suse.com/1134718"
},
{
"category": "external",
"summary": "SUSE Bug 1163365 for CVE-2019-2698",
"url": "https://bugzilla.suse.com/1163365"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-2698"
},
{
"cve": "CVE-2019-2745",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-2745"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 7u221, 8u212 and 11.0.3. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Java SE executes to compromise Java SE. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Java SE accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 5.1 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-2745",
"url": "https://www.suse.com/security/cve/CVE-2019-2745"
},
{
"category": "external",
"summary": "SUSE Bug 1141784 for CVE-2019-2745",
"url": "https://bugzilla.suse.com/1141784"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-2745"
},
{
"cve": "CVE-2019-2762",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-2762"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Utilities). Supported versions that are affected are Java SE: 7u221, 8u212, 11.0.3 and 12.0.1; Java SE Embedded: 8u211. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-2762",
"url": "https://www.suse.com/security/cve/CVE-2019-2762"
},
{
"category": "external",
"summary": "SUSE Bug 1141782 for CVE-2019-2762",
"url": "https://bugzilla.suse.com/1141782"
},
{
"category": "external",
"summary": "SUSE Bug 1147021 for CVE-2019-2762",
"url": "https://bugzilla.suse.com/1147021"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-2762"
},
{
"cve": "CVE-2019-2766",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-2766"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Networking). Supported versions that are affected are Java SE: 7u221, 8u212, 11.0.3 and 12.0.1; Java SE Embedded: 8u211. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 3.1 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-2766",
"url": "https://www.suse.com/security/cve/CVE-2019-2766"
},
{
"category": "external",
"summary": "SUSE Bug 1141789 for CVE-2019-2766",
"url": "https://bugzilla.suse.com/1141789"
},
{
"category": "external",
"summary": "SUSE Bug 1147021 for CVE-2019-2766",
"url": "https://bugzilla.suse.com/1147021"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.1,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-2766"
},
{
"cve": "CVE-2019-2769",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-2769"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Utilities). Supported versions that are affected are Java SE: 7u221, 8u212, 11.0.3 and 12.0.1; Java SE Embedded: 8u211. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-2769",
"url": "https://www.suse.com/security/cve/CVE-2019-2769"
},
{
"category": "external",
"summary": "SUSE Bug 1141783 for CVE-2019-2769",
"url": "https://bugzilla.suse.com/1141783"
},
{
"category": "external",
"summary": "SUSE Bug 1147021 for CVE-2019-2769",
"url": "https://bugzilla.suse.com/1147021"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-2769"
},
{
"cve": "CVE-2019-2786",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-2786"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 8u212, 11.0.3 and 12.0.1; Java SE Embedded: 8u211. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, Java SE Embedded, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 3.4 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-2786",
"url": "https://www.suse.com/security/cve/CVE-2019-2786"
},
{
"category": "external",
"summary": "SUSE Bug 1141787 for CVE-2019-2786",
"url": "https://bugzilla.suse.com/1141787"
},
{
"category": "external",
"summary": "SUSE Bug 1147021 for CVE-2019-2786",
"url": "https://bugzilla.suse.com/1147021"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.1,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-2786"
},
{
"cve": "CVE-2019-2816",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-2816"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Networking). Supported versions that are affected are Java SE: 7u221, 8u212, 11.0.3 and 12.0.1; Java SE Embedded: 8u211. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded accessible data as well as unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 4.8 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-2816",
"url": "https://www.suse.com/security/cve/CVE-2019-2816"
},
{
"category": "external",
"summary": "SUSE Bug 1141785 for CVE-2019-2816",
"url": "https://bugzilla.suse.com/1141785"
},
{
"category": "external",
"summary": "SUSE Bug 1147021 for CVE-2019-2816",
"url": "https://bugzilla.suse.com/1147021"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.8,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-2816"
},
{
"cve": "CVE-2019-2842",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-2842"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE component of Oracle Java SE (subcomponent: JCE). The supported version that is affected is Java SE: 8u212. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 3.7 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-2842",
"url": "https://www.suse.com/security/cve/CVE-2019-2842"
},
{
"category": "external",
"summary": "SUSE Bug 1141786 for CVE-2019-2842",
"url": "https://bugzilla.suse.com/1141786"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-2842"
},
{
"cve": "CVE-2019-2894",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-2894"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Security). Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13; Java SE Embedded: 8u221. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 3.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-2894",
"url": "https://www.suse.com/security/cve/CVE-2019-2894"
},
{
"category": "external",
"summary": "SUSE Bug 1152856 for CVE-2019-2894",
"url": "https://bugzilla.suse.com/1152856"
},
{
"category": "external",
"summary": "SUSE Bug 1154212 for CVE-2019-2894",
"url": "https://bugzilla.suse.com/1154212"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-2894"
},
{
"cve": "CVE-2019-2933",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-2933"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13; Java SE Embedded: 8u221. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 3.1 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-2933",
"url": "https://www.suse.com/security/cve/CVE-2019-2933"
},
{
"category": "external",
"summary": "SUSE Bug 1154212 for CVE-2019-2933",
"url": "https://bugzilla.suse.com/1154212"
},
{
"category": "external",
"summary": "SUSE Bug 1158442 for CVE-2019-2933",
"url": "https://bugzilla.suse.com/1158442"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.1,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-2933"
},
{
"cve": "CVE-2019-2945",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-2945"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Networking). Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13; Java SE Embedded: 8u221. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 3.1 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-2945",
"url": "https://www.suse.com/security/cve/CVE-2019-2945"
},
{
"category": "external",
"summary": "SUSE Bug 1154212 for CVE-2019-2945",
"url": "https://bugzilla.suse.com/1154212"
},
{
"category": "external",
"summary": "SUSE Bug 1158442 for CVE-2019-2945",
"url": "https://bugzilla.suse.com/1158442"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.1,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-2945"
},
{
"cve": "CVE-2019-2949",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-2949"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Kerberos). Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13; Java SE Embedded: 8u221. Difficult to exploit vulnerability allows unauthenticated attacker with network access via Kerberos to compromise Java SE, Java SE Embedded. While the vulnerability is in Java SE, Java SE Embedded, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 6.8 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-2949",
"url": "https://www.suse.com/security/cve/CVE-2019-2949"
},
{
"category": "external",
"summary": "SUSE Bug 1154212 for CVE-2019-2949",
"url": "https://bugzilla.suse.com/1154212"
},
{
"category": "external",
"summary": "SUSE Bug 1172277 for CVE-2019-2949",
"url": "https://bugzilla.suse.com/1172277"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.8,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-2949"
},
{
"cve": "CVE-2019-2958",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-2958"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13; Java SE Embedded: 8u221. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 5.9 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-2958",
"url": "https://www.suse.com/security/cve/CVE-2019-2958"
},
{
"category": "external",
"summary": "SUSE Bug 1154212 for CVE-2019-2958",
"url": "https://bugzilla.suse.com/1154212"
},
{
"category": "external",
"summary": "SUSE Bug 1158442 for CVE-2019-2958",
"url": "https://bugzilla.suse.com/1158442"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-2958"
},
{
"cve": "CVE-2019-2962",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-2962"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: 2D). Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13; Java SE Embedded: 8u221. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 3.7 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-2962",
"url": "https://www.suse.com/security/cve/CVE-2019-2962"
},
{
"category": "external",
"summary": "SUSE Bug 1154212 for CVE-2019-2962",
"url": "https://bugzilla.suse.com/1154212"
},
{
"category": "external",
"summary": "SUSE Bug 1158442 for CVE-2019-2962",
"url": "https://bugzilla.suse.com/1158442"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-2962"
},
{
"cve": "CVE-2019-2964",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-2964"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Concurrency). Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13; Java SE Embedded: 8u221. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.0 Base Score 3.7 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-2964",
"url": "https://www.suse.com/security/cve/CVE-2019-2964"
},
{
"category": "external",
"summary": "SUSE Bug 1154212 for CVE-2019-2964",
"url": "https://bugzilla.suse.com/1154212"
},
{
"category": "external",
"summary": "SUSE Bug 1158442 for CVE-2019-2964",
"url": "https://bugzilla.suse.com/1158442"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-2964"
},
{
"cve": "CVE-2019-2973",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-2973"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JAXP). Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13; Java SE Embedded: 8u221. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 3.7 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-2973",
"url": "https://www.suse.com/security/cve/CVE-2019-2973"
},
{
"category": "external",
"summary": "SUSE Bug 1154212 for CVE-2019-2973",
"url": "https://bugzilla.suse.com/1154212"
},
{
"category": "external",
"summary": "SUSE Bug 1158442 for CVE-2019-2973",
"url": "https://bugzilla.suse.com/1158442"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-2973"
},
{
"cve": "CVE-2019-2975",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-2975"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Scripting). Supported versions that are affected are Java SE: 8u221, 11.0.4 and 13; Java SE Embedded: 8u221. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 4.8 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-2975",
"url": "https://www.suse.com/security/cve/CVE-2019-2975"
},
{
"category": "external",
"summary": "SUSE Bug 1154212 for CVE-2019-2975",
"url": "https://bugzilla.suse.com/1154212"
},
{
"category": "external",
"summary": "SUSE Bug 1158442 for CVE-2019-2975",
"url": "https://bugzilla.suse.com/1158442"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.8,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-2975"
},
{
"cve": "CVE-2019-2978",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-2978"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Networking). Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13; Java SE Embedded: 8u221. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 3.7 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-2978",
"url": "https://www.suse.com/security/cve/CVE-2019-2978"
},
{
"category": "external",
"summary": "SUSE Bug 1154212 for CVE-2019-2978",
"url": "https://bugzilla.suse.com/1154212"
},
{
"category": "external",
"summary": "SUSE Bug 1158442 for CVE-2019-2978",
"url": "https://bugzilla.suse.com/1158442"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-2978"
},
{
"cve": "CVE-2019-2981",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-2981"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JAXP). Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13; Java SE Embedded: 8u221. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 3.7 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-2981",
"url": "https://www.suse.com/security/cve/CVE-2019-2981"
},
{
"category": "external",
"summary": "SUSE Bug 1154212 for CVE-2019-2981",
"url": "https://bugzilla.suse.com/1154212"
},
{
"category": "external",
"summary": "SUSE Bug 1158442 for CVE-2019-2981",
"url": "https://bugzilla.suse.com/1158442"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-2981"
},
{
"cve": "CVE-2019-2983",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-2983"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Serialization). Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13; Java SE Embedded: 8u221. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 3.7 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-2983",
"url": "https://www.suse.com/security/cve/CVE-2019-2983"
},
{
"category": "external",
"summary": "SUSE Bug 1154212 for CVE-2019-2983",
"url": "https://bugzilla.suse.com/1154212"
},
{
"category": "external",
"summary": "SUSE Bug 1158442 for CVE-2019-2983",
"url": "https://bugzilla.suse.com/1158442"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-2983"
},
{
"cve": "CVE-2019-2987",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-2987"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE product of Oracle Java SE (component: 2D). Supported versions that are affected are Java SE: 11.0.4 and 13. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 3.7 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-2987",
"url": "https://www.suse.com/security/cve/CVE-2019-2987"
},
{
"category": "external",
"summary": "SUSE Bug 1154212 for CVE-2019-2987",
"url": "https://bugzilla.suse.com/1154212"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-2987"
},
{
"cve": "CVE-2019-2988",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-2988"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: 2D). Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13; Java SE Embedded: 8u221. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 3.7 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-2988",
"url": "https://www.suse.com/security/cve/CVE-2019-2988"
},
{
"category": "external",
"summary": "SUSE Bug 1154212 for CVE-2019-2988",
"url": "https://bugzilla.suse.com/1154212"
},
{
"category": "external",
"summary": "SUSE Bug 1158442 for CVE-2019-2988",
"url": "https://bugzilla.suse.com/1158442"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-2988"
},
{
"cve": "CVE-2019-2989",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-2989"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Networking). Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13; Java SE Embedded: 8u221. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. While the vulnerability is in Java SE, Java SE Embedded, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS v3.0 Base Score 6.8 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-2989",
"url": "https://www.suse.com/security/cve/CVE-2019-2989"
},
{
"category": "external",
"summary": "SUSE Bug 1154212 for CVE-2019-2989",
"url": "https://bugzilla.suse.com/1154212"
},
{
"category": "external",
"summary": "SUSE Bug 1158442 for CVE-2019-2989",
"url": "https://bugzilla.suse.com/1158442"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-2989"
},
{
"cve": "CVE-2019-2992",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-2992"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: 2D). Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13; Java SE Embedded: 8u221. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 3.7 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-2992",
"url": "https://www.suse.com/security/cve/CVE-2019-2992"
},
{
"category": "external",
"summary": "SUSE Bug 1154212 for CVE-2019-2992",
"url": "https://bugzilla.suse.com/1154212"
},
{
"category": "external",
"summary": "SUSE Bug 1158442 for CVE-2019-2992",
"url": "https://bugzilla.suse.com/1158442"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-2992"
},
{
"cve": "CVE-2019-2999",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-2999"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE product of Oracle Java SE (component: Javadoc). Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE accessible data as well as unauthorized read access to a subset of Java SE accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 4.7 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-2999",
"url": "https://www.suse.com/security/cve/CVE-2019-2999"
},
{
"category": "external",
"summary": "SUSE Bug 1154212 for CVE-2019-2999",
"url": "https://bugzilla.suse.com/1154212"
},
{
"category": "external",
"summary": "SUSE Bug 1158442 for CVE-2019-2999",
"url": "https://bugzilla.suse.com/1158442"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-2999"
},
{
"cve": "CVE-2019-7317",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-7317"
}
],
"notes": [
{
"category": "general",
"text": "png_image_free in png.c in libpng 1.6.x before 1.6.37 has a use-after-free because png_image_free_function is called under png_safe_execute.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-7317",
"url": "https://www.suse.com/security/cve/CVE-2019-7317"
},
{
"category": "external",
"summary": "SUSE Bug 1124211 for CVE-2019-7317",
"url": "https://bugzilla.suse.com/1124211"
},
{
"category": "external",
"summary": "SUSE Bug 1135824 for CVE-2019-7317",
"url": "https://bugzilla.suse.com/1135824"
},
{
"category": "external",
"summary": "SUSE Bug 1141780 for CVE-2019-7317",
"url": "https://bugzilla.suse.com/1141780"
},
{
"category": "external",
"summary": "SUSE Bug 1147021 for CVE-2019-7317",
"url": "https://bugzilla.suse.com/1147021"
},
{
"category": "external",
"summary": "SUSE Bug 1165297 for CVE-2019-7317",
"url": "https://bugzilla.suse.com/1165297"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-7317"
},
{
"cve": "CVE-2020-14556",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-14556"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 8u251, 11.0.7 and 14.0.1; Java SE Embedded: 8u251. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded accessible data as well as unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.1 Base Score 4.8 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-14556",
"url": "https://www.suse.com/security/cve/CVE-2020-14556"
},
{
"category": "external",
"summary": "SUSE Bug 1174157 for CVE-2020-14556",
"url": "https://bugzilla.suse.com/1174157"
},
{
"category": "external",
"summary": "SUSE Bug 1175259 for CVE-2020-14556",
"url": "https://bugzilla.suse.com/1175259"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.8,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-14556"
},
{
"cve": "CVE-2020-14577",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-14577"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JSSE). Supported versions that are affected are Java SE: 7u261, 8u251, 11.0.7 and 14.0.1; Java SE Embedded: 8u251. Difficult to exploit vulnerability allows unauthenticated attacker with network access via TLS to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.1 Base Score 3.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-14577",
"url": "https://www.suse.com/security/cve/CVE-2020-14577"
},
{
"category": "external",
"summary": "SUSE Bug 1174157 for CVE-2020-14577",
"url": "https://bugzilla.suse.com/1174157"
},
{
"category": "external",
"summary": "SUSE Bug 1175259 for CVE-2020-14577",
"url": "https://bugzilla.suse.com/1175259"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-14577"
},
{
"cve": "CVE-2020-14578",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-14578"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u261 and 8u251; Java SE Embedded: 8u251. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.1 Base Score 3.7 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-14578",
"url": "https://www.suse.com/security/cve/CVE-2020-14578"
},
{
"category": "external",
"summary": "SUSE Bug 1174157 for CVE-2020-14578",
"url": "https://bugzilla.suse.com/1174157"
},
{
"category": "external",
"summary": "SUSE Bug 1175259 for CVE-2020-14578",
"url": "https://bugzilla.suse.com/1175259"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-14578"
},
{
"cve": "CVE-2020-14579",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-14579"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u261 and 8u251; Java SE Embedded: 8u251. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.1 Base Score 3.7 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-14579",
"url": "https://www.suse.com/security/cve/CVE-2020-14579"
},
{
"category": "external",
"summary": "SUSE Bug 1174157 for CVE-2020-14579",
"url": "https://bugzilla.suse.com/1174157"
},
{
"category": "external",
"summary": "SUSE Bug 1175259 for CVE-2020-14579",
"url": "https://bugzilla.suse.com/1175259"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-14579"
},
{
"cve": "CVE-2020-14581",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-14581"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: 2D). Supported versions that are affected are Java SE: 8u251, 11.0.7 and 14.0.1; Java SE Embedded: 8u251. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.1 Base Score 3.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-14581",
"url": "https://www.suse.com/security/cve/CVE-2020-14581"
},
{
"category": "external",
"summary": "SUSE Bug 1174157 for CVE-2020-14581",
"url": "https://bugzilla.suse.com/1174157"
},
{
"category": "external",
"summary": "SUSE Bug 1175259 for CVE-2020-14581",
"url": "https://bugzilla.suse.com/1175259"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-14581"
},
{
"cve": "CVE-2020-14583",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-14583"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u261, 8u251, 11.0.7 and 14.0.1; Java SE Embedded: 8u251. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, Java SE Embedded, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 8.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-14583",
"url": "https://www.suse.com/security/cve/CVE-2020-14583"
},
{
"category": "external",
"summary": "SUSE Bug 1174157 for CVE-2020-14583",
"url": "https://bugzilla.suse.com/1174157"
},
{
"category": "external",
"summary": "SUSE Bug 1175259 for CVE-2020-14583",
"url": "https://bugzilla.suse.com/1175259"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.3,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-14583"
},
{
"cve": "CVE-2020-14593",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-14593"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: 2D). Supported versions that are affected are Java SE: 7u261, 8u251, 11.0.7 and 14.0.1; Java SE Embedded: 8u251. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, Java SE Embedded, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 7.4 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-14593",
"url": "https://www.suse.com/security/cve/CVE-2020-14593"
},
{
"category": "external",
"summary": "SUSE Bug 1174157 for CVE-2020-14593",
"url": "https://bugzilla.suse.com/1174157"
},
{
"category": "external",
"summary": "SUSE Bug 1175259 for CVE-2020-14593",
"url": "https://bugzilla.suse.com/1175259"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.4,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-14593"
},
{
"cve": "CVE-2020-14621",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-14621"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JAXP). Supported versions that are affected are Java SE: 7u261, 8u251, 11.0.7 and 14.0.1; Java SE Embedded: 8u251. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 5.3 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-14621",
"url": "https://www.suse.com/security/cve/CVE-2020-14621"
},
{
"category": "external",
"summary": "SUSE Bug 1174157 for CVE-2020-14621",
"url": "https://bugzilla.suse.com/1174157"
},
{
"category": "external",
"summary": "SUSE Bug 1175259 for CVE-2020-14621",
"url": "https://bugzilla.suse.com/1175259"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-14621"
},
{
"cve": "CVE-2020-14779",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-14779"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Serialization). Supported versions that are affected are Java SE: 7u271, 8u261, 11.0.8 and 15; Java SE Embedded: 8u261. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.1 Base Score 3.7 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-14779",
"url": "https://www.suse.com/security/cve/CVE-2020-14779"
},
{
"category": "external",
"summary": "SUSE Bug 1177943 for CVE-2020-14779",
"url": "https://bugzilla.suse.com/1177943"
},
{
"category": "external",
"summary": "SUSE Bug 1180063 for CVE-2020-14779",
"url": "https://bugzilla.suse.com/1180063"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2020-14779"
},
{
"cve": "CVE-2020-14781",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-14781"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JNDI). Supported versions that are affected are Java SE: 7u271, 8u261, 11.0.8 and 15; Java SE Embedded: 8u261. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.1 Base Score 3.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-14781",
"url": "https://www.suse.com/security/cve/CVE-2020-14781"
},
{
"category": "external",
"summary": "SUSE Bug 1177943 for CVE-2020-14781",
"url": "https://bugzilla.suse.com/1177943"
},
{
"category": "external",
"summary": "SUSE Bug 1180063 for CVE-2020-14781",
"url": "https://bugzilla.suse.com/1180063"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2020-14781"
},
{
"cve": "CVE-2020-14782",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-14782"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u271, 8u261, 11.0.8 and 15; Java SE Embedded: 8u261. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded accessible data. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.1 Base Score 3.7 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-14782",
"url": "https://www.suse.com/security/cve/CVE-2020-14782"
},
{
"category": "external",
"summary": "SUSE Bug 1177943 for CVE-2020-14782",
"url": "https://bugzilla.suse.com/1177943"
},
{
"category": "external",
"summary": "SUSE Bug 1180063 for CVE-2020-14782",
"url": "https://bugzilla.suse.com/1180063"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2020-14782"
},
{
"cve": "CVE-2020-14792",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-14792"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Hotspot). Supported versions that are affected are Java SE: 7u271, 8u261, 11.0.8 and 15; Java SE Embedded: 8u261. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded accessible data as well as unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.1 Base Score 4.2 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-14792",
"url": "https://www.suse.com/security/cve/CVE-2020-14792"
},
{
"category": "external",
"summary": "SUSE Bug 1177943 for CVE-2020-14792",
"url": "https://bugzilla.suse.com/1177943"
},
{
"category": "external",
"summary": "SUSE Bug 1180063 for CVE-2020-14792",
"url": "https://bugzilla.suse.com/1180063"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.2,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2020-14792"
},
{
"cve": "CVE-2020-14796",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-14796"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u271, 8u261, 11.0.8 and 15; Java SE Embedded: 8u261. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 3.1 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-14796",
"url": "https://www.suse.com/security/cve/CVE-2020-14796"
},
{
"category": "external",
"summary": "SUSE Bug 1177943 for CVE-2020-14796",
"url": "https://bugzilla.suse.com/1177943"
},
{
"category": "external",
"summary": "SUSE Bug 1180063 for CVE-2020-14796",
"url": "https://bugzilla.suse.com/1180063"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.1,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2020-14796"
},
{
"cve": "CVE-2020-14797",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-14797"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u271, 8u261, 11.0.8 and 15; Java SE Embedded: 8u261. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded accessible data. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.1 Base Score 3.7 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-14797",
"url": "https://www.suse.com/security/cve/CVE-2020-14797"
},
{
"category": "external",
"summary": "SUSE Bug 1177943 for CVE-2020-14797",
"url": "https://bugzilla.suse.com/1177943"
},
{
"category": "external",
"summary": "SUSE Bug 1180063 for CVE-2020-14797",
"url": "https://bugzilla.suse.com/1180063"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2020-14797"
},
{
"cve": "CVE-2020-14798",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-14798"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u271, 8u261, 11.0.8 and 15; Java SE Embedded: 8u261. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 3.1 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-14798",
"url": "https://www.suse.com/security/cve/CVE-2020-14798"
},
{
"category": "external",
"summary": "SUSE Bug 1177943 for CVE-2020-14798",
"url": "https://bugzilla.suse.com/1177943"
},
{
"category": "external",
"summary": "SUSE Bug 1180063 for CVE-2020-14798",
"url": "https://bugzilla.suse.com/1180063"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2020-14798"
},
{
"cve": "CVE-2020-14803",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-14803"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 11.0.8 and 15. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-14803",
"url": "https://www.suse.com/security/cve/CVE-2020-14803"
},
{
"category": "external",
"summary": "SUSE Bug 1177943 for CVE-2020-14803",
"url": "https://bugzilla.suse.com/1177943"
},
{
"category": "external",
"summary": "SUSE Bug 1181239 for CVE-2020-14803",
"url": "https://bugzilla.suse.com/1181239"
},
{
"category": "external",
"summary": "SUSE Bug 1182186 for CVE-2020-14803",
"url": "https://bugzilla.suse.com/1182186"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2020-14803"
},
{
"cve": "CVE-2020-2583",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-2583"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Serialization). Supported versions that are affected are Java SE: 7u241, 8u231, 11.0.5 and 13.0.1; Java SE Embedded: 8u231. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 3.7 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-2583",
"url": "https://www.suse.com/security/cve/CVE-2020-2583"
},
{
"category": "external",
"summary": "SUSE Bug 1160968 for CVE-2020-2583",
"url": "https://bugzilla.suse.com/1160968"
},
{
"category": "external",
"summary": "SUSE Bug 1162972 for CVE-2020-2583",
"url": "https://bugzilla.suse.com/1162972"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2020-2583"
},
{
"cve": "CVE-2020-2590",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-2590"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Security). Supported versions that are affected are Java SE: 7u241, 8u231, 11.0.5 and 13.0.1; Java SE Embedded: 8u231. Difficult to exploit vulnerability allows unauthenticated attacker with network access via Kerberos to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 3.7 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-2590",
"url": "https://www.suse.com/security/cve/CVE-2020-2590"
},
{
"category": "external",
"summary": "SUSE Bug 1160968 for CVE-2020-2590",
"url": "https://bugzilla.suse.com/1160968"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2020-2590"
},
{
"cve": "CVE-2020-2593",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-2593"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Networking). Supported versions that are affected are Java SE: 7u241, 8u231, 11.0.5 and 13.0.1; Java SE Embedded: 8u231. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded accessible data as well as unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 4.8 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-2593",
"url": "https://www.suse.com/security/cve/CVE-2020-2593"
},
{
"category": "external",
"summary": "SUSE Bug 1160968 for CVE-2020-2593",
"url": "https://bugzilla.suse.com/1160968"
},
{
"category": "external",
"summary": "SUSE Bug 1162972 for CVE-2020-2593",
"url": "https://bugzilla.suse.com/1162972"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.8,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2020-2593"
},
{
"cve": "CVE-2020-2601",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-2601"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Security). Supported versions that are affected are Java SE: 7u241, 8u231, 11.0.5 and 13.0.1; Java SE Embedded: 8u231. Difficult to exploit vulnerability allows unauthenticated attacker with network access via Kerberos to compromise Java SE, Java SE Embedded. While the vulnerability is in Java SE, Java SE Embedded, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 6.8 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-2601",
"url": "https://www.suse.com/security/cve/CVE-2020-2601"
},
{
"category": "external",
"summary": "SUSE Bug 1160968 for CVE-2020-2601",
"url": "https://bugzilla.suse.com/1160968"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.8,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2020-2601"
},
{
"cve": "CVE-2020-2604",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-2604"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Serialization). Supported versions that are affected are Java SE: 7u241, 8u231, 11.0.5 and 13.0.1; Java SE Embedded: 8u231. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in takeover of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS v3.0 Base Score 8.1 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-2604",
"url": "https://www.suse.com/security/cve/CVE-2020-2604"
},
{
"category": "external",
"summary": "SUSE Bug 1160968 for CVE-2020-2604",
"url": "https://bugzilla.suse.com/1160968"
},
{
"category": "external",
"summary": "SUSE Bug 1162972 for CVE-2020-2604",
"url": "https://bugzilla.suse.com/1162972"
},
{
"category": "external",
"summary": "SUSE Bug 1165863 for CVE-2020-2604",
"url": "https://bugzilla.suse.com/1165863"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-2604"
},
{
"cve": "CVE-2020-2654",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-2654"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u241, 8u231, 11.0.5 and 13.0.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.0 Base Score 3.7 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-2654",
"url": "https://www.suse.com/security/cve/CVE-2020-2654"
},
{
"category": "external",
"summary": "SUSE Bug 1160968 for CVE-2020-2654",
"url": "https://bugzilla.suse.com/1160968"
},
{
"category": "external",
"summary": "SUSE Bug 1172277 for CVE-2020-2654",
"url": "https://bugzilla.suse.com/1172277"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2020-2654"
},
{
"cve": "CVE-2020-2659",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-2659"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Networking). Supported versions that are affected are Java SE: 7u241 and 8u231; Java SE Embedded: 8u231. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 3.7 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-2659",
"url": "https://www.suse.com/security/cve/CVE-2020-2659"
},
{
"category": "external",
"summary": "SUSE Bug 1160968 for CVE-2020-2659",
"url": "https://bugzilla.suse.com/1160968"
},
{
"category": "external",
"summary": "SUSE Bug 1162972 for CVE-2020-2659",
"url": "https://bugzilla.suse.com/1162972"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2020-2659"
},
{
"cve": "CVE-2020-2754",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-2754"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Scripting). Supported versions that are affected are Java SE: 8u241, 11.0.6 and 14; Java SE Embedded: 8u241. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 3.7 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-2754",
"url": "https://www.suse.com/security/cve/CVE-2020-2754"
},
{
"category": "external",
"summary": "SUSE Bug 1169511 for CVE-2020-2754",
"url": "https://bugzilla.suse.com/1169511"
},
{
"category": "external",
"summary": "SUSE Bug 1172277 for CVE-2020-2754",
"url": "https://bugzilla.suse.com/1172277"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-2754"
},
{
"cve": "CVE-2020-2755",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-2755"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Scripting). Supported versions that are affected are Java SE: 8u241, 11.0.6 and 14; Java SE Embedded: 8u241. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 3.7 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-2755",
"url": "https://www.suse.com/security/cve/CVE-2020-2755"
},
{
"category": "external",
"summary": "SUSE Bug 1169511 for CVE-2020-2755",
"url": "https://bugzilla.suse.com/1169511"
},
{
"category": "external",
"summary": "SUSE Bug 1172277 for CVE-2020-2755",
"url": "https://bugzilla.suse.com/1172277"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-2755"
},
{
"cve": "CVE-2020-2756",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-2756"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Serialization). Supported versions that are affected are Java SE: 7u251, 8u241, 11.0.6 and 14; Java SE Embedded: 8u241. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 3.7 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-2756",
"url": "https://www.suse.com/security/cve/CVE-2020-2756"
},
{
"category": "external",
"summary": "SUSE Bug 1169511 for CVE-2020-2756",
"url": "https://bugzilla.suse.com/1169511"
},
{
"category": "external",
"summary": "SUSE Bug 1172277 for CVE-2020-2756",
"url": "https://bugzilla.suse.com/1172277"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-2756"
},
{
"cve": "CVE-2020-2757",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-2757"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Serialization). Supported versions that are affected are Java SE: 7u251, 8u241, 11.0.6 and 14; Java SE Embedded: 8u241. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 3.7 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-2757",
"url": "https://www.suse.com/security/cve/CVE-2020-2757"
},
{
"category": "external",
"summary": "SUSE Bug 1169511 for CVE-2020-2757",
"url": "https://bugzilla.suse.com/1169511"
},
{
"category": "external",
"summary": "SUSE Bug 1172277 for CVE-2020-2757",
"url": "https://bugzilla.suse.com/1172277"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-2757"
},
{
"cve": "CVE-2020-2773",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-2773"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Security). Supported versions that are affected are Java SE: 7u251, 8u241, 11.0.6 and 14; Java SE Embedded: 8u241. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 3.7 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-2773",
"url": "https://www.suse.com/security/cve/CVE-2020-2773"
},
{
"category": "external",
"summary": "SUSE Bug 1169511 for CVE-2020-2773",
"url": "https://bugzilla.suse.com/1169511"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-2773"
},
{
"cve": "CVE-2020-2781",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-2781"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JSSE). Supported versions that are affected are Java SE: 7u251, 8u241, 11.0.6 and 14; Java SE Embedded: 8u241. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-2781",
"url": "https://www.suse.com/security/cve/CVE-2020-2781"
},
{
"category": "external",
"summary": "SUSE Bug 1169511 for CVE-2020-2781",
"url": "https://bugzilla.suse.com/1169511"
},
{
"category": "external",
"summary": "SUSE Bug 1172277 for CVE-2020-2781",
"url": "https://bugzilla.suse.com/1172277"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-2781"
},
{
"cve": "CVE-2020-2800",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-2800"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Lightweight HTTP Server). Supported versions that are affected are Java SE: 7u251, 8u241, 11.0.6 and 14; Java SE Embedded: 8u241. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded accessible data as well as unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.0 Base Score 4.8 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-2800",
"url": "https://www.suse.com/security/cve/CVE-2020-2800"
},
{
"category": "external",
"summary": "SUSE Bug 1169511 for CVE-2020-2800",
"url": "https://bugzilla.suse.com/1169511"
},
{
"category": "external",
"summary": "SUSE Bug 1172277 for CVE-2020-2800",
"url": "https://bugzilla.suse.com/1172277"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.8,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-2800"
},
{
"cve": "CVE-2020-2803",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-2803"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u251, 8u241, 11.0.6 and 14; Java SE Embedded: 8u241. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, Java SE Embedded, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 8.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-2803",
"url": "https://www.suse.com/security/cve/CVE-2020-2803"
},
{
"category": "external",
"summary": "SUSE Bug 1169511 for CVE-2020-2803",
"url": "https://bugzilla.suse.com/1169511"
},
{
"category": "external",
"summary": "SUSE Bug 1172277 for CVE-2020-2803",
"url": "https://bugzilla.suse.com/1172277"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.3,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-2803"
},
{
"cve": "CVE-2020-2805",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-2805"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u251, 8u241, 11.0.6 and 14; Java SE Embedded: 8u241. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, Java SE Embedded, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 8.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-2805",
"url": "https://www.suse.com/security/cve/CVE-2020-2805"
},
{
"category": "external",
"summary": "SUSE Bug 1169511 for CVE-2020-2805",
"url": "https://bugzilla.suse.com/1169511"
},
{
"category": "external",
"summary": "SUSE Bug 1172277 for CVE-2020-2805",
"url": "https://bugzilla.suse.com/1172277"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.3,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-2805"
},
{
"cve": "CVE-2020-2830",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-2830"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Concurrency). Supported versions that are affected are Java SE: 7u251, 8u241, 11.0.6 and 14; Java SE Embedded: 8u241. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-2830",
"url": "https://www.suse.com/security/cve/CVE-2020-2830"
},
{
"category": "external",
"summary": "SUSE Bug 1169511 for CVE-2020-2830",
"url": "https://bugzilla.suse.com/1169511"
},
{
"category": "external",
"summary": "SUSE Bug 1172277 for CVE-2020-2830",
"url": "https://bugzilla.suse.com/1172277"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-2830"
},
{
"cve": "CVE-2021-2161",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-2161"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u291, 8u281, 11.0.10, 16; Java SE Embedded: 8u281; Oracle GraalVM Enterprise Edition: 19.3.5, 20.3.1.2 and 21.0.0.2. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Java SE, Java SE Embedded, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. It can also be exploited by supplying untrusted data to APIs in the specified Component. CVSS 3.1 Base Score 5.9 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-2161",
"url": "https://www.suse.com/security/cve/CVE-2021-2161"
},
{
"category": "external",
"summary": "SUSE Bug 1185056 for CVE-2021-2161",
"url": "https://bugzilla.suse.com/1185056"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-2161"
},
{
"cve": "CVE-2021-2163",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-2163"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u291, 8u281, 11.0.10, 16; Java SE Embedded: 8u281; Oracle GraalVM Enterprise Edition: 19.3.5, 20.3.1.2 and 21.0.0.2. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, Oracle GraalVM Enterprise Edition. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Java SE, Java SE Embedded, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 5.3 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-2163",
"url": "https://www.suse.com/security/cve/CVE-2021-2163"
},
{
"category": "external",
"summary": "SUSE Bug 1185055 for CVE-2021-2163",
"url": "https://bugzilla.suse.com/1185055"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-2163"
},
{
"cve": "CVE-2021-2341",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-2341"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking). Supported versions that are affected are Java SE: 7u301, 8u291, 11.0.11, 16.0.1; Oracle GraalVM Enterprise Edition: 20.3.2 and 21.1.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Oracle GraalVM Enterprise Edition. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 3.1 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-2341",
"url": "https://www.suse.com/security/cve/CVE-2021-2341"
},
{
"category": "external",
"summary": "SUSE Bug 1188564 for CVE-2021-2341",
"url": "https://bugzilla.suse.com/1188564"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.1,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-2341"
},
{
"cve": "CVE-2021-2369",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-2369"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Library). Supported versions that are affected are Java SE: 7u301, 8u291, 11.0.11, 16.0.1; Oracle GraalVM Enterprise Edition: 20.3.2 and 21.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Oracle GraalVM Enterprise Edition. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 4.3 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-2369",
"url": "https://www.suse.com/security/cve/CVE-2021-2369"
},
{
"category": "external",
"summary": "SUSE Bug 1188565 for CVE-2021-2369",
"url": "https://bugzilla.suse.com/1188565"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-2369"
},
{
"cve": "CVE-2021-2388",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-2388"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot). Supported versions that are affected are Java SE: 8u291, 11.0.11, 16.0.1; Oracle GraalVM Enterprise Edition: 20.3.2 and 21.1.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Oracle GraalVM Enterprise Edition. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of Java SE, Oracle GraalVM Enterprise Edition. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 7.5 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-2388",
"url": "https://www.suse.com/security/cve/CVE-2021-2388"
},
{
"category": "external",
"summary": "SUSE Bug 1188566 for CVE-2021-2388",
"url": "https://bugzilla.suse.com/1188566"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.302-2.2.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.302-2.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-2388"
}
]
}
wid-sec-w-2023-1308
Vulnerability from csaf_certbund
Published
2018-07-17 22:00
Modified
2023-05-25 22:00
Summary
Oracle Java SE: Mehrere Schwachstellen
Notes
Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen.
Produktbeschreibung
Die Java Platform, Standard Edition (SE) ist eine Sammlung von Java-APIs (JDK) und der Java Laufzeit Umgebung (JRE).
Java Standard Edition (SE) Embedded ist die Laufzeitumgebung für die Java-Plattform des US-Unternehmens Oracle Corporation für Embedded Systems.
Oracle JRockit JVM ist eine leistungsfähige Java Virtual Machine, die in Oracle Fusion Middleware enthalten ist.
Angriff
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Oracle Java SE, Oracle Java SE Embedded und Oracle JRockit ausnutzen, um die Verfügbarkeit, Vertraulichkeit und Integrität zu gefährden.
Betroffene Betriebssysteme
- UNIX
- Linux
- Windows
- Appliance
{
"document": {
"aggregate_severity": {
"text": "mittel"
},
"category": "csaf_base",
"csaf_version": "2.0",
"distribution": {
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "de-DE",
"notes": [
{
"category": "legal_disclaimer",
"text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen."
},
{
"category": "description",
"text": "Die Java Platform, Standard Edition (SE) ist eine Sammlung von Java-APIs (JDK) und der Java Laufzeit Umgebung (JRE).\r\nJava Standard Edition (SE) Embedded ist die Laufzeitumgebung f\u00fcr die Java-Plattform des US-Unternehmens Oracle Corporation f\u00fcr Embedded Systems.\r\nOracle JRockit JVM ist eine leistungsf\u00e4hige Java Virtual Machine, die in Oracle Fusion Middleware enthalten ist.",
"title": "Produktbeschreibung"
},
{
"category": "summary",
"text": "Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Oracle Java SE, Oracle Java SE Embedded und Oracle JRockit ausnutzen, um die Verf\u00fcgbarkeit, Vertraulichkeit und Integrit\u00e4t zu gef\u00e4hrden.",
"title": "Angriff"
},
{
"category": "general",
"text": "- UNIX\n- Linux\n- Windows\n- Appliance",
"title": "Betroffene Betriebssysteme"
}
],
"publisher": {
"category": "other",
"contact_details": "csaf-provider@cert-bund.de",
"name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik",
"namespace": "https://www.bsi.bund.de"
},
"references": [
{
"category": "self",
"summary": "WID-SEC-W-2023-1308 - CSAF Version",
"url": "https://wid.cert-bund.de/.well-known/csaf/white/2018/wid-sec-w-2023-1308.json"
},
{
"category": "self",
"summary": "WID-SEC-2023-1308 - Portal Version",
"url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2023-1308"
},
{
"category": "external",
"summary": "F5 Security Advisory K000134793 vom 2023-05-25",
"url": "https://my.f5.com/manage/s/article/K000134793"
},
{
"category": "external",
"summary": "Oracle Critical Patch Update Advisory - Juli 2018 -Java SE vom 2018-07-17",
"url": "http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html#AppendixJAVA"
},
{
"category": "external",
"summary": "Oracle Linux Security Advisory ELSA-2018-2241 vom 2018-07-23",
"url": "http://linux.oracle.com/errata/ELSA-2018-2241.html"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2018:2242 vom 2018-07-23",
"url": "http://rhn.redhat.com/errata/RHSA-2018-2242.html"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2018:2241 vom 2018-07-23",
"url": "http://rhn.redhat.com/errata/RHSA-2018-2241.html"
},
{
"category": "external",
"summary": "Oracle Linux Security Advisory ELSA-2018-2242 vom 2018-07-24",
"url": "http://linux.oracle.com/errata/ELSA-2018-2242.html"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2018:2256 vom 2018-07-24",
"url": "https://access.redhat.com/errata/RHSA-2018:2256"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2018:2255 vom 2018-07-24",
"url": "https://access.redhat.com/errata/RHSA-2018:2255"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2018:2254 vom 2018-07-24",
"url": "https://access.redhat.com/errata/RHSA-2018:2254"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2018:2253 vom 2018-07-24",
"url": "https://access.redhat.com/errata/RHSA-2018:2253"
},
{
"category": "external",
"summary": "NetApp Security Advisory NTAP-20180726-0001 vom 2018-07-27",
"url": "https://security.netapp.com/advisory/ntap-20180726-0001/"
},
{
"category": "external",
"summary": "Hitachi Security Information hitachi-sec-2018-122 vom 2018-07.26",
"url": "http://www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/hitachi-sec-2018-122/index.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2018:2083-1 vom 2018-07-28",
"url": "https://www.suse.com/support/update/announcement/2018/suse-su-20182083-1.html"
},
{
"category": "external",
"summary": "Oracle Linux Security Advisory ELSA-2018-2286 vom 2018-07-31",
"url": "http://linux.oracle.com/errata/ELSA-2018-2286.html"
},
{
"category": "external",
"summary": "Oracle Linux Security Advisory ELSA-2018-2283 vom 2018-07-31",
"url": "http://linux.oracle.com/errata/ELSA-2018-2283.html"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2018:2286 vom 2018-07-30",
"url": "http://rhn.redhat.com/errata/RHSA-2018-2286.html"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2018:2283 vom 2018-07-30",
"url": "http://rhn.redhat.com/errata/RHSA-2018-2283.html"
},
{
"category": "external",
"summary": "CentOS-announce CESA-2018:2242 vom 2018-07-25",
"url": "https://lists.centos.org/pipermail/centos-announce/2018-July/022972.html"
},
{
"category": "external",
"summary": "CentOS Security Advisory CESA-2018:2283 vom 2018-08-09",
"url": "http://centos-announce.2309468.n4.nabble.com/CentOS-announce-CESA-2018-2283-Moderate-CentOS-6-java-1-7-0-openjdk-Security-Update-tp4645217.html"
},
{
"category": "external",
"summary": "CentOS Security Advisory CESA-2018:2286 vom 2018-08-09",
"url": "http://centos-announce.2309468.n4.nabble.com/CentOS-announce-CESA-2018-2286-Moderate-CentOS-7-java-1-7-0-openjdk-Security-Update-tp4645220.html"
},
{
"category": "external",
"summary": "Debian Security Advisory DSA-4268 vom 2018-08-11",
"url": "https://www.debian.org/security/2018/dsa-4268"
},
{
"category": "external",
"summary": "Ubuntu Security Notice USN-3734-1 vom 2018-08-10",
"url": "http://www.ubuntu.com/usn/usn-3734-1"
},
{
"category": "external",
"summary": "Ubuntu Security Notice USN-3735-1 vom 2018-08-10",
"url": "http://www.ubuntu.com/usn/usn-3735-1"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2018:2568 vom 2018-08-27",
"url": "http://rhn.redhat.com/errata/RHSA-2018-2568.html"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2018:2569 vom 2018-08-27",
"url": "http://rhn.redhat.com/errata/RHSA-2018-2569.html"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2018:2576 vom 2018-08-28",
"url": "http://rhn.redhat.com/errata/RHSA-2018-2576.html"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2018:2575 vom 2018-08-28",
"url": "http://rhn.redhat.com/errata/RHSA-2018-2575.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2018:2839-1 vom 2018-09-24",
"url": "https://www.suse.com/support/update/announcement/2018/suse-su-20182839-1.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2018:3045-1 vom 2018-10-06",
"url": "https://www.suse.com/support/update/announcement/2018/suse-su-20183045-1.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2018:3064-1 vom 2018-10-08",
"url": "https://www.suse.com/support/update/announcement/2018/suse-su-20183064-1.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2018:3082-1 vom 2018-10-09",
"url": "https://www.suse.com/support/update/announcement/2018/suse-su-20183082-1.html"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2018:3007 vom 2018-10-25",
"url": "https://access.redhat.com/errata/RHSA-2018:3007"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2018:3008 vom 2018-10-25",
"url": "https://access.redhat.com/errata/RHSA-2018:3008"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2019:0049-1 vom 2019-01-10",
"url": "https://www.suse.com/support/update/announcement/2019/suse-su-20190049-1/"
},
{
"category": "external",
"summary": "Dell/EMC Knowledge Base Article: 000529947",
"url": "https://support.emc.com/kb/529947"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2019:0049-2 vom 2019-04-13",
"url": "https://www.suse.com/support/update/announcement/2019/suse-su-20190049-2.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2018:3064-3 vom 2019-04-28",
"url": "https://www.suse.com/support/update/announcement/2019/suse-su-20183064-3.html"
},
{
"category": "external",
"summary": "Avaya Security Advisory ASA-2018-241 vom 2019-12-20",
"url": "https://downloads.avaya.com/css/P8/documents/101053536"
}
],
"source_lang": "en-US",
"title": "Oracle Java SE: Mehrere Schwachstellen",
"tracking": {
"current_release_date": "2023-05-25T22:00:00.000+00:00",
"generator": {
"date": "2024-08-15T17:51:27.993+00:00",
"engine": {
"name": "BSI-WID",
"version": "1.3.5"
}
},
"id": "WID-SEC-W-2023-1308",
"initial_release_date": "2018-07-17T22:00:00.000+00:00",
"revision_history": [
{
"date": "2018-07-17T22:00:00.000+00:00",
"number": "1",
"summary": "Initial Release"
},
{
"date": "2018-07-17T22:00:00.000+00:00",
"number": "2",
"summary": "Version nicht vorhanden"
},
{
"date": "2018-07-17T22:00:00.000+00:00",
"number": "3",
"summary": "Version nicht vorhanden"
},
{
"date": "2018-07-23T22:00:00.000+00:00",
"number": "4",
"summary": "New remediations available"
},
{
"date": "2018-07-24T22:00:00.000+00:00",
"number": "5",
"summary": "New remediations available"
},
{
"date": "2018-07-24T22:00:00.000+00:00",
"number": "6",
"summary": "New remediations available"
},
{
"date": "2018-07-24T22:00:00.000+00:00",
"number": "7",
"summary": "Version nicht vorhanden"
},
{
"date": "2018-07-25T22:00:00.000+00:00",
"number": "8",
"summary": "New remediations available"
},
{
"date": "2018-07-26T22:00:00.000+00:00",
"number": "9",
"summary": "New remediations available"
},
{
"date": "2018-07-26T22:00:00.000+00:00",
"number": "10",
"summary": "Version nicht vorhanden"
},
{
"date": "2018-07-26T22:00:00.000+00:00",
"number": "11",
"summary": "Version nicht vorhanden"
},
{
"date": "2018-07-29T22:00:00.000+00:00",
"number": "12",
"summary": "New remediations available"
},
{
"date": "2018-07-30T22:00:00.000+00:00",
"number": "13",
"summary": "New remediations available"
},
{
"date": "2018-07-30T22:00:00.000+00:00",
"number": "14",
"summary": "New remediations available"
},
{
"date": "2018-08-09T22:00:00.000+00:00",
"number": "15",
"summary": "New remediations available"
},
{
"date": "2018-08-12T22:00:00.000+00:00",
"number": "16",
"summary": "New remediations available"
},
{
"date": "2018-08-12T22:00:00.000+00:00",
"number": "17",
"summary": "New remediations available"
},
{
"date": "2018-08-12T22:00:00.000+00:00",
"number": "18",
"summary": "Version nicht vorhanden"
},
{
"date": "2018-08-12T22:00:00.000+00:00",
"number": "19",
"summary": "Version nicht vorhanden"
},
{
"date": "2018-08-27T22:00:00.000+00:00",
"number": "20",
"summary": "New remediations available"
},
{
"date": "2018-08-28T22:00:00.000+00:00",
"number": "21",
"summary": "New remediations available"
},
{
"date": "2018-09-24T22:00:00.000+00:00",
"number": "22",
"summary": "New remediations available"
},
{
"date": "2018-10-07T22:00:00.000+00:00",
"number": "23",
"summary": "New remediations available"
},
{
"date": "2018-10-08T22:00:00.000+00:00",
"number": "24",
"summary": "New remediations available"
},
{
"date": "2018-10-09T22:00:00.000+00:00",
"number": "25",
"summary": "New remediations available"
},
{
"date": "2018-10-24T22:00:00.000+00:00",
"number": "26",
"summary": "New remediations available"
},
{
"date": "2018-11-22T23:00:00.000+00:00",
"number": "27",
"summary": "reference added"
},
{
"date": "2019-01-09T23:00:00.000+00:00",
"number": "28",
"summary": "Neue Updates von SUSE aufgenommen"
},
{
"date": "2019-01-30T23:00:00.000+00:00",
"number": "29",
"summary": "Neue Updates von EMC aufgenommen"
},
{
"date": "2019-04-14T22:00:00.000+00:00",
"number": "30",
"summary": "Neue Updates von SUSE aufgenommen"
},
{
"date": "2019-04-28T22:00:00.000+00:00",
"number": "31",
"summary": "Neue Updates von SUSE aufgenommen"
},
{
"date": "2019-12-22T23:00:00.000+00:00",
"number": "32",
"summary": "Neue Updates von AVAYA aufgenommen"
},
{
"date": "2023-05-25T22:00:00.000+00:00",
"number": "33",
"summary": "Neue Updates von F5 aufgenommen"
}
],
"status": "final",
"version": "33"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Avaya Aura Experience Portal",
"product": {
"name": "Avaya Aura Experience Portal",
"product_id": "T015519",
"product_identification_helper": {
"cpe": "cpe:/a:avaya:aura_experience_portal:-"
}
}
},
{
"category": "product_name",
"name": "Avaya Aura Session Manager",
"product": {
"name": "Avaya Aura Session Manager",
"product_id": "T015127",
"product_identification_helper": {
"cpe": "cpe:/a:avaya:session_manager:-"
}
}
},
{
"category": "product_name",
"name": "Avaya Aura System Manager",
"product": {
"name": "Avaya Aura System Manager",
"product_id": "T015518",
"product_identification_helper": {
"cpe": "cpe:/a:avaya:aura_system_manager:-"
}
}
}
],
"category": "vendor",
"name": "Avaya"
},
{
"branches": [
{
"category": "product_name",
"name": "Debian Linux",
"product": {
"name": "Debian Linux",
"product_id": "2951",
"product_identification_helper": {
"cpe": "cpe:/o:debian:debian_linux:-"
}
}
}
],
"category": "vendor",
"name": "Debian"
},
{
"branches": [
{
"category": "product_name",
"name": "EMC VNX2",
"product": {
"name": "EMC VNX2",
"product_id": "T004667",
"product_identification_helper": {
"cpe": "cpe:/h:emc:vnx:-"
}
}
}
],
"category": "vendor",
"name": "EMC"
},
{
"branches": [
{
"category": "product_name",
"name": "F5 BIG-IP",
"product": {
"name": "F5 BIG-IP",
"product_id": "T001663",
"product_identification_helper": {
"cpe": "cpe:/a:f5:big-ip:-"
}
}
}
],
"category": "vendor",
"name": "F5"
},
{
"branches": [
{
"category": "product_name",
"name": "Hitachi Command Suite",
"product": {
"name": "Hitachi Command Suite",
"product_id": "T010951",
"product_identification_helper": {
"cpe": "cpe:/a:hitachi:command_suite:-"
}
}
}
],
"category": "vendor",
"name": "Hitachi"
},
{
"branches": [
{
"category": "product_name",
"name": "NetApp OnCommand Unified Manager",
"product": {
"name": "NetApp OnCommand Unified Manager",
"product_id": "T009408",
"product_identification_helper": {
"cpe": "cpe:/a:netapp:oncommand_unified_manager:-"
}
}
}
],
"category": "vendor",
"name": "NetApp"
},
{
"branches": [
{
"category": "product_name",
"name": "Open Source CentOS",
"product": {
"name": "Open Source CentOS",
"product_id": "1727",
"product_identification_helper": {
"cpe": "cpe:/o:centos:centos:-"
}
}
}
],
"category": "vendor",
"name": "Open Source"
},
{
"branches": [
{
"category": "product_name",
"name": "Oracle Java SE",
"product": {
"name": "Oracle Java SE",
"product_id": "T009724",
"product_identification_helper": {
"cpe": "cpe:/a:oracle:java_se:-"
}
}
},
{
"category": "product_name",
"name": "Oracle Linux",
"product": {
"name": "Oracle Linux",
"product_id": "T004914",
"product_identification_helper": {
"cpe": "cpe:/o:oracle:linux:-"
}
}
}
],
"category": "vendor",
"name": "Oracle"
},
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux",
"product": {
"name": "Red Hat Enterprise Linux",
"product_id": "67646",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:-"
}
}
}
],
"category": "vendor",
"name": "Red Hat"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux",
"product": {
"name": "SUSE Linux",
"product_id": "T002207",
"product_identification_helper": {
"cpe": "cpe:/o:suse:suse_linux:-"
}
}
}
],
"category": "vendor",
"name": "SUSE"
},
{
"branches": [
{
"category": "product_name",
"name": "Ubuntu Linux",
"product": {
"name": "Ubuntu Linux",
"product_id": "T000126",
"product_identification_helper": {
"cpe": "cpe:/o:canonical:ubuntu_linux:-"
}
}
}
],
"category": "vendor",
"name": "Ubuntu"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2018-2938",
"notes": [
{
"category": "description",
"text": "In Oracle Java SE, Oracle Java SE Embedded und Oracle JRockit existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein entfernter Angreifer die Verf\u00fcgbarkeit, Vertraulichkeit und Integrit\u00e4t gef\u00e4hrden. F\u00fcr die Ausnutzung einiger dieser Schwachstellen ist keine Authentifizierung bzw. keine Benutzerinteraktion notwendig. Oracle ver\u00f6ffentlicht keine weiteren Details zu diesen Schwachstellen (au\u00dfer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadensh\u00f6he ausschlie\u00dflich auf Basis der CVSS Impact Matrix. Der Maximalwert f\u00fcr diese Produkte ist \"High\" f\u00fcr \"Availability\", \"Confidentiality\" und \"Integrity\" und bewirkt damit eine \"hohe\" Schadensh\u00f6he."
}
],
"product_status": {
"known_affected": [
"T015519",
"T015518",
"T009408",
"67646",
"T004667",
"T009724",
"T010951",
"T015127",
"T004914",
"2951",
"T002207",
"T000126",
"T001663",
"1727"
]
},
"release_date": "2018-07-17T22:00:00.000+00:00",
"title": "CVE-2018-2938"
},
{
"cve": "CVE-2018-2940",
"notes": [
{
"category": "description",
"text": "In Oracle Java SE, Oracle Java SE Embedded und Oracle JRockit existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein entfernter Angreifer die Verf\u00fcgbarkeit, Vertraulichkeit und Integrit\u00e4t gef\u00e4hrden. F\u00fcr die Ausnutzung einiger dieser Schwachstellen ist keine Authentifizierung bzw. keine Benutzerinteraktion notwendig. Oracle ver\u00f6ffentlicht keine weiteren Details zu diesen Schwachstellen (au\u00dfer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadensh\u00f6he ausschlie\u00dflich auf Basis der CVSS Impact Matrix. Der Maximalwert f\u00fcr diese Produkte ist \"High\" f\u00fcr \"Availability\", \"Confidentiality\" und \"Integrity\" und bewirkt damit eine \"hohe\" Schadensh\u00f6he."
}
],
"product_status": {
"known_affected": [
"T015519",
"T015518",
"T009408",
"67646",
"T004667",
"T009724",
"T010951",
"T015127",
"T004914",
"2951",
"T002207",
"T000126",
"T001663",
"1727"
]
},
"release_date": "2018-07-17T22:00:00.000+00:00",
"title": "CVE-2018-2940"
},
{
"cve": "CVE-2018-2941",
"notes": [
{
"category": "description",
"text": "In Oracle Java SE, Oracle Java SE Embedded und Oracle JRockit existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein entfernter Angreifer die Verf\u00fcgbarkeit, Vertraulichkeit und Integrit\u00e4t gef\u00e4hrden. F\u00fcr die Ausnutzung einiger dieser Schwachstellen ist keine Authentifizierung bzw. keine Benutzerinteraktion notwendig. Oracle ver\u00f6ffentlicht keine weiteren Details zu diesen Schwachstellen (au\u00dfer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadensh\u00f6he ausschlie\u00dflich auf Basis der CVSS Impact Matrix. Der Maximalwert f\u00fcr diese Produkte ist \"High\" f\u00fcr \"Availability\", \"Confidentiality\" und \"Integrity\" und bewirkt damit eine \"hohe\" Schadensh\u00f6he."
}
],
"product_status": {
"known_affected": [
"T015519",
"T015518",
"T009408",
"67646",
"T004667",
"T009724",
"T010951",
"T015127",
"T004914",
"2951",
"T002207",
"T000126",
"T001663",
"1727"
]
},
"release_date": "2018-07-17T22:00:00.000+00:00",
"title": "CVE-2018-2941"
},
{
"cve": "CVE-2018-2942",
"notes": [
{
"category": "description",
"text": "In Oracle Java SE, Oracle Java SE Embedded und Oracle JRockit existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein entfernter Angreifer die Verf\u00fcgbarkeit, Vertraulichkeit und Integrit\u00e4t gef\u00e4hrden. F\u00fcr die Ausnutzung einiger dieser Schwachstellen ist keine Authentifizierung bzw. keine Benutzerinteraktion notwendig. Oracle ver\u00f6ffentlicht keine weiteren Details zu diesen Schwachstellen (au\u00dfer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadensh\u00f6he ausschlie\u00dflich auf Basis der CVSS Impact Matrix. Der Maximalwert f\u00fcr diese Produkte ist \"High\" f\u00fcr \"Availability\", \"Confidentiality\" und \"Integrity\" und bewirkt damit eine \"hohe\" Schadensh\u00f6he."
}
],
"product_status": {
"known_affected": [
"T015519",
"T015518",
"T009408",
"67646",
"T004667",
"T009724",
"T010951",
"T015127",
"T004914",
"2951",
"T002207",
"T000126",
"T001663",
"1727"
]
},
"release_date": "2018-07-17T22:00:00.000+00:00",
"title": "CVE-2018-2942"
},
{
"cve": "CVE-2018-2952",
"notes": [
{
"category": "description",
"text": "In Oracle Java SE, Oracle Java SE Embedded und Oracle JRockit existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein entfernter Angreifer die Verf\u00fcgbarkeit, Vertraulichkeit und Integrit\u00e4t gef\u00e4hrden. F\u00fcr die Ausnutzung einiger dieser Schwachstellen ist keine Authentifizierung bzw. keine Benutzerinteraktion notwendig. Oracle ver\u00f6ffentlicht keine weiteren Details zu diesen Schwachstellen (au\u00dfer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadensh\u00f6he ausschlie\u00dflich auf Basis der CVSS Impact Matrix. Der Maximalwert f\u00fcr diese Produkte ist \"High\" f\u00fcr \"Availability\", \"Confidentiality\" und \"Integrity\" und bewirkt damit eine \"hohe\" Schadensh\u00f6he."
}
],
"product_status": {
"known_affected": [
"T015519",
"T015518",
"T009408",
"67646",
"T004667",
"T009724",
"T010951",
"T015127",
"T004914",
"2951",
"T002207",
"T000126",
"T001663",
"1727"
]
},
"release_date": "2018-07-17T22:00:00.000+00:00",
"title": "CVE-2018-2952"
},
{
"cve": "CVE-2018-2964",
"notes": [
{
"category": "description",
"text": "In Oracle Java SE, Oracle Java SE Embedded und Oracle JRockit existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein entfernter Angreifer die Verf\u00fcgbarkeit, Vertraulichkeit und Integrit\u00e4t gef\u00e4hrden. F\u00fcr die Ausnutzung einiger dieser Schwachstellen ist keine Authentifizierung bzw. keine Benutzerinteraktion notwendig. Oracle ver\u00f6ffentlicht keine weiteren Details zu diesen Schwachstellen (au\u00dfer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadensh\u00f6he ausschlie\u00dflich auf Basis der CVSS Impact Matrix. Der Maximalwert f\u00fcr diese Produkte ist \"High\" f\u00fcr \"Availability\", \"Confidentiality\" und \"Integrity\" und bewirkt damit eine \"hohe\" Schadensh\u00f6he."
}
],
"product_status": {
"known_affected": [
"T015519",
"T015518",
"T009408",
"67646",
"T004667",
"T009724",
"T010951",
"T015127",
"T004914",
"2951",
"T002207",
"T000126",
"T001663",
"1727"
]
},
"release_date": "2018-07-17T22:00:00.000+00:00",
"title": "CVE-2018-2964"
},
{
"cve": "CVE-2018-2972",
"notes": [
{
"category": "description",
"text": "In Oracle Java SE, Oracle Java SE Embedded und Oracle JRockit existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein entfernter Angreifer die Verf\u00fcgbarkeit, Vertraulichkeit und Integrit\u00e4t gef\u00e4hrden. F\u00fcr die Ausnutzung einiger dieser Schwachstellen ist keine Authentifizierung bzw. keine Benutzerinteraktion notwendig. Oracle ver\u00f6ffentlicht keine weiteren Details zu diesen Schwachstellen (au\u00dfer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadensh\u00f6he ausschlie\u00dflich auf Basis der CVSS Impact Matrix. Der Maximalwert f\u00fcr diese Produkte ist \"High\" f\u00fcr \"Availability\", \"Confidentiality\" und \"Integrity\" und bewirkt damit eine \"hohe\" Schadensh\u00f6he."
}
],
"product_status": {
"known_affected": [
"T015519",
"T015518",
"T009408",
"67646",
"T004667",
"T009724",
"T010951",
"T015127",
"T004914",
"2951",
"T002207",
"T000126",
"T001663",
"1727"
]
},
"release_date": "2018-07-17T22:00:00.000+00:00",
"title": "CVE-2018-2972"
},
{
"cve": "CVE-2018-2973",
"notes": [
{
"category": "description",
"text": "In Oracle Java SE, Oracle Java SE Embedded und Oracle JRockit existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein entfernter Angreifer die Verf\u00fcgbarkeit, Vertraulichkeit und Integrit\u00e4t gef\u00e4hrden. F\u00fcr die Ausnutzung einiger dieser Schwachstellen ist keine Authentifizierung bzw. keine Benutzerinteraktion notwendig. Oracle ver\u00f6ffentlicht keine weiteren Details zu diesen Schwachstellen (au\u00dfer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadensh\u00f6he ausschlie\u00dflich auf Basis der CVSS Impact Matrix. Der Maximalwert f\u00fcr diese Produkte ist \"High\" f\u00fcr \"Availability\", \"Confidentiality\" und \"Integrity\" und bewirkt damit eine \"hohe\" Schadensh\u00f6he."
}
],
"product_status": {
"known_affected": [
"T015519",
"T015518",
"T009408",
"67646",
"T004667",
"T009724",
"T010951",
"T015127",
"T004914",
"2951",
"T002207",
"T000126",
"T001663",
"1727"
]
},
"release_date": "2018-07-17T22:00:00.000+00:00",
"title": "CVE-2018-2973"
}
]
}
gsd-2018-2952
Vulnerability from gsd
Modified
2023-12-13 01:22
Details
Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Concurrency). Supported versions that are affected are Java SE: 6u191, 7u181, 8u172 and 10.0.1; Java SE Embedded: 8u171; JRockit: R28.3.18. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 3.7 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).
Aliases
Aliases
{
"GSD": {
"alias": "CVE-2018-2952",
"description": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Concurrency). Supported versions that are affected are Java SE: 6u191, 7u181, 8u172 and 10.0.1; Java SE Embedded: 8u171; JRockit: R28.3.18. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 3.7 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"id": "GSD-2018-2952",
"references": [
"https://www.suse.com/security/cve/CVE-2018-2952.html",
"https://www.debian.org/security/2018/dsa-4268",
"https://access.redhat.com/errata/RHSA-2018:3008",
"https://access.redhat.com/errata/RHSA-2018:3007",
"https://access.redhat.com/errata/RHSA-2018:2713",
"https://access.redhat.com/errata/RHSA-2018:2712",
"https://access.redhat.com/errata/RHSA-2018:2576",
"https://access.redhat.com/errata/RHSA-2018:2575",
"https://access.redhat.com/errata/RHSA-2018:2569",
"https://access.redhat.com/errata/RHSA-2018:2568",
"https://access.redhat.com/errata/RHSA-2018:2286",
"https://access.redhat.com/errata/RHSA-2018:2283",
"https://access.redhat.com/errata/RHSA-2018:2256",
"https://access.redhat.com/errata/RHSA-2018:2255",
"https://access.redhat.com/errata/RHSA-2018:2254",
"https://access.redhat.com/errata/RHSA-2018:2253",
"https://access.redhat.com/errata/RHSA-2018:2242",
"https://access.redhat.com/errata/RHSA-2018:2241",
"https://ubuntu.com/security/CVE-2018-2952",
"https://advisories.mageia.org/CVE-2018-2952.html",
"https://alas.aws.amazon.com/cve/html/CVE-2018-2952.html",
"https://linux.oracle.com/cve/CVE-2018-2952.html"
]
},
"gsd": {
"metadata": {
"exploitCode": "unknown",
"remediation": "unknown",
"reportConfidence": "confirmed",
"type": "vulnerability"
},
"osvSchema": {
"aliases": [
"CVE-2018-2952"
],
"details": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Concurrency). Supported versions that are affected are Java SE: 6u191, 7u181, 8u172 and 10.0.1; Java SE Embedded: 8u171; JRockit: R28.3.18. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 3.7 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"id": "GSD-2018-2952",
"modified": "2023-12-13T01:22:32.048739Z",
"schema_version": "1.4.0"
}
},
"namespaces": {
"cve.org": {
"CVE_data_meta": {
"ASSIGNER": "secalert_us@oracle.com",
"ID": "CVE-2018-2952",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "Java",
"version": {
"version_data": [
{
"version_affected": "=",
"version_value": "Java SE: 6u191"
},
{
"version_affected": "=",
"version_value": "7u181"
},
{
"version_affected": "=",
"version_value": "8u172"
},
{
"version_affected": "=",
"version_value": "10.0.1; Java SE Embedded: 8u171; JRockit: R28.3.18"
}
]
}
}
]
},
"vendor_name": "Oracle Corporation"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Concurrency). Supported versions that are affected are Java SE: 6u191, 7u181, 8u172 and 10.0.1; Java SE Embedded: 8u171; JRockit: R28.3.18. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 3.7 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L)."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit."
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "RHSA-2018:2254",
"refsource": "REDHAT",
"url": "https://access.redhat.com/errata/RHSA-2018:2254"
},
{
"name": "[debian-lts-announce] 20181122 [SECURITY] [DLA 1590-1] openjdk-7 security update",
"refsource": "MLIST",
"url": "https://lists.debian.org/debian-lts-announce/2018/11/msg00026.html"
},
{
"name": "RHSA-2018:3007",
"refsource": "REDHAT",
"url": "https://access.redhat.com/errata/RHSA-2018:3007"
},
{
"name": "104765",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/104765"
},
{
"name": "http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html",
"refsource": "CONFIRM",
"url": "http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html"
},
{
"name": "RHSA-2018:2713",
"refsource": "REDHAT",
"url": "https://access.redhat.com/errata/RHSA-2018:2713"
},
{
"name": "https://security.netapp.com/advisory/ntap-20180726-0001/",
"refsource": "CONFIRM",
"url": "https://security.netapp.com/advisory/ntap-20180726-0001/"
},
{
"name": "RHSA-2018:2242",
"refsource": "REDHAT",
"url": "https://access.redhat.com/errata/RHSA-2018:2242"
},
{
"name": "RHSA-2018:2255",
"refsource": "REDHAT",
"url": "https://access.redhat.com/errata/RHSA-2018:2255"
},
{
"name": "USN-3747-1",
"refsource": "UBUNTU",
"url": "https://usn.ubuntu.com/3747-1/"
},
{
"name": "RHSA-2018:2575",
"refsource": "REDHAT",
"url": "https://access.redhat.com/errata/RHSA-2018:2575"
},
{
"name": "RHSA-2018:2256",
"refsource": "REDHAT",
"url": "https://access.redhat.com/errata/RHSA-2018:2256"
},
{
"name": "RHSA-2018:2576",
"refsource": "REDHAT",
"url": "https://access.redhat.com/errata/RHSA-2018:2576"
},
{
"name": "RHSA-2018:2241",
"refsource": "REDHAT",
"url": "https://access.redhat.com/errata/RHSA-2018:2241"
},
{
"name": "RHSA-2018:2253",
"refsource": "REDHAT",
"url": "https://access.redhat.com/errata/RHSA-2018:2253"
},
{
"name": "RHSA-2018:2568",
"refsource": "REDHAT",
"url": "https://access.redhat.com/errata/RHSA-2018:2568"
},
{
"name": "RHSA-2018:2569",
"refsource": "REDHAT",
"url": "https://access.redhat.com/errata/RHSA-2018:2569"
},
{
"name": "USN-3735-1",
"refsource": "UBUNTU",
"url": "https://usn.ubuntu.com/3735-1/"
},
{
"name": "RHSA-2018:2712",
"refsource": "REDHAT",
"url": "https://access.redhat.com/errata/RHSA-2018:2712"
},
{
"name": "RHSA-2018:3008",
"refsource": "REDHAT",
"url": "https://access.redhat.com/errata/RHSA-2018:3008"
},
{
"name": "RHSA-2018:2286",
"refsource": "REDHAT",
"url": "https://access.redhat.com/errata/RHSA-2018:2286"
},
{
"name": "DSA-4268",
"refsource": "DEBIAN",
"url": "https://www.debian.org/security/2018/dsa-4268"
},
{
"name": "RHSA-2018:2283",
"refsource": "REDHAT",
"url": "https://access.redhat.com/errata/RHSA-2018:2283"
},
{
"name": "1041302",
"refsource": "SECTRACK",
"url": "http://www.securitytracker.com/id/1041302"
},
{
"name": "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbst03882en_us",
"refsource": "CONFIRM",
"url": "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbst03882en_us"
},
{
"name": "USN-3734-1",
"refsource": "UBUNTU",
"url": "https://usn.ubuntu.com/3734-1/"
},
{
"name": "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbst03928en_us",
"refsource": "CONFIRM",
"url": "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbst03928en_us"
}
]
}
},
"nvd.nist.gov": {
"configurations": {
"CVE_data_version": "4.0",
"nodes": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:a:oracle:jre:10.0.1:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:oracle:jdk:10.0.1:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:oracle:jdk:1.8.0:update172:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:oracle:jdk:1.7.0:update181:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:oracle:jdk:1.6.0:update191:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:oracle:jre:1.6.0:update191:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:oracle:jre:1.7.0:update181:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:oracle:jre:1.8.0:update172:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:a:oracle:jrockit:r28.3.18:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:esm:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:esm:*:*:*",
"cpe_name": [],
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:a:hp:xp7_command_view:*:*:*:*:advanced:*:*:*",
"cpe_name": [],
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:redhat:satellite:5.7:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_eus:7.5:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:redhat:satellite:5.6:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:redhat:satellite:5.8:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_eus:7.6:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.7:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.7:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_eus:7.7:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:a:netapp:cloud_backup:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:netapp:steelstore_cloud_integrated_storage:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:netapp:snapmanager:-:*:*:*:*:oracle:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:netapp:snapmanager:-:*:*:*:*:sap:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:netapp:oncommand_unified_manager:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:netapp:oncommand_workflow_automation:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:netapp:oncommand_insight:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:netapp:e-series_santricity_storage_manager:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:vmware_vsphere:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:netapp:plug-in_for_symantec_netbackup:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:windows:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:netapp:e-series_santricity_os_controller:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndIncluding": "11.70.1",
"versionStartIncluding": "11.0",
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:netapp:virtual_storage_console:*:*:*:*:*:vmware_vsphere:*:*",
"cpe_name": [],
"versionStartIncluding": "9.7",
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:netapp:storage_replication_adapter_for_clustered_data_ontap:*:*:*:*:*:vmware_vsphere:*:*",
"cpe_name": [],
"versionStartIncluding": "9.7",
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:netapp:vasa_provider_for_clustered_data_ontap:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionStartIncluding": "9.7",
"vulnerable": true
}
],
"operator": "OR"
}
]
},
"cve": {
"CVE_data_meta": {
"ASSIGNER": "secalert_us@oracle.com",
"ID": "CVE-2018-2952"
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "en",
"value": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Concurrency). Supported versions that are affected are Java SE: 6u191, 7u181, 8u172 and 10.0.1; Java SE Embedded: 8u171; JRockit: R28.3.18. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 3.7 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L)."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "en",
"value": "NVD-CWE-noinfo"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html",
"refsource": "CONFIRM",
"tags": [
"Patch",
"Vendor Advisory"
],
"url": "http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html"
},
{
"name": "104765",
"refsource": "BID",
"tags": [
"Broken Link"
],
"url": "http://www.securityfocus.com/bid/104765"
},
{
"name": "RHSA-2018:2242",
"refsource": "REDHAT",
"tags": [
"Third Party Advisory"
],
"url": "https://access.redhat.com/errata/RHSA-2018:2242"
},
{
"name": "RHSA-2018:2241",
"refsource": "REDHAT",
"tags": [
"Third Party Advisory"
],
"url": "https://access.redhat.com/errata/RHSA-2018:2241"
},
{
"name": "RHSA-2018:2256",
"refsource": "REDHAT",
"tags": [
"Third Party Advisory"
],
"url": "https://access.redhat.com/errata/RHSA-2018:2256"
},
{
"name": "RHSA-2018:2255",
"refsource": "REDHAT",
"tags": [
"Third Party Advisory"
],
"url": "https://access.redhat.com/errata/RHSA-2018:2255"
},
{
"name": "RHSA-2018:2254",
"refsource": "REDHAT",
"tags": [
"Third Party Advisory"
],
"url": "https://access.redhat.com/errata/RHSA-2018:2254"
},
{
"name": "RHSA-2018:2253",
"refsource": "REDHAT",
"tags": [
"Third Party Advisory"
],
"url": "https://access.redhat.com/errata/RHSA-2018:2253"
},
{
"name": "https://security.netapp.com/advisory/ntap-20180726-0001/",
"refsource": "CONFIRM",
"tags": [
"Third Party Advisory"
],
"url": "https://security.netapp.com/advisory/ntap-20180726-0001/"
},
{
"name": "1041302",
"refsource": "SECTRACK",
"tags": [
"Broken Link"
],
"url": "http://www.securitytracker.com/id/1041302"
},
{
"name": "RHSA-2018:2286",
"refsource": "REDHAT",
"tags": [
"Third Party Advisory"
],
"url": "https://access.redhat.com/errata/RHSA-2018:2286"
},
{
"name": "RHSA-2018:2283",
"refsource": "REDHAT",
"tags": [
"Third Party Advisory"
],
"url": "https://access.redhat.com/errata/RHSA-2018:2283"
},
{
"name": "USN-3735-1",
"refsource": "UBUNTU",
"tags": [
"Third Party Advisory"
],
"url": "https://usn.ubuntu.com/3735-1/"
},
{
"name": "USN-3734-1",
"refsource": "UBUNTU",
"tags": [
"Third Party Advisory"
],
"url": "https://usn.ubuntu.com/3734-1/"
},
{
"name": "DSA-4268",
"refsource": "DEBIAN",
"tags": [
"Third Party Advisory"
],
"url": "https://www.debian.org/security/2018/dsa-4268"
},
{
"name": "USN-3747-1",
"refsource": "UBUNTU",
"tags": [
"Third Party Advisory"
],
"url": "https://usn.ubuntu.com/3747-1/"
},
{
"name": "RHSA-2018:2569",
"refsource": "REDHAT",
"tags": [
"Third Party Advisory"
],
"url": "https://access.redhat.com/errata/RHSA-2018:2569"
},
{
"name": "RHSA-2018:2568",
"refsource": "REDHAT",
"tags": [
"Third Party Advisory"
],
"url": "https://access.redhat.com/errata/RHSA-2018:2568"
},
{
"name": "RHSA-2018:2576",
"refsource": "REDHAT",
"tags": [
"Third Party Advisory"
],
"url": "https://access.redhat.com/errata/RHSA-2018:2576"
},
{
"name": "RHSA-2018:2575",
"refsource": "REDHAT",
"tags": [
"Third Party Advisory"
],
"url": "https://access.redhat.com/errata/RHSA-2018:2575"
},
{
"name": "RHSA-2018:2713",
"refsource": "REDHAT",
"tags": [
"Third Party Advisory"
],
"url": "https://access.redhat.com/errata/RHSA-2018:2713"
},
{
"name": "RHSA-2018:2712",
"refsource": "REDHAT",
"tags": [
"Third Party Advisory"
],
"url": "https://access.redhat.com/errata/RHSA-2018:2712"
},
{
"name": "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbst03882en_us",
"refsource": "CONFIRM",
"tags": [
"Third Party Advisory"
],
"url": "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbst03882en_us"
},
{
"name": "RHSA-2018:3008",
"refsource": "REDHAT",
"tags": [
"Third Party Advisory"
],
"url": "https://access.redhat.com/errata/RHSA-2018:3008"
},
{
"name": "RHSA-2018:3007",
"refsource": "REDHAT",
"tags": [
"Third Party Advisory"
],
"url": "https://access.redhat.com/errata/RHSA-2018:3007"
},
{
"name": "[debian-lts-announce] 20181122 [SECURITY] [DLA 1590-1] openjdk-7 security update",
"refsource": "MLIST",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "https://lists.debian.org/debian-lts-announce/2018/11/msg00026.html"
},
{
"name": "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbst03928en_us",
"refsource": "CONFIRM",
"tags": [
"Third Party Advisory"
],
"url": "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbst03928en_us"
}
]
}
},
"impact": {
"baseMetricV2": {
"cvssV2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 4.3,
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:P",
"version": "2.0"
},
"exploitabilityScore": 8.6,
"impactScore": 2.9,
"obtainAllPrivilege": false,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": false,
"severity": "MEDIUM",
"userInteractionRequired": false
},
"baseMetricV3": {
"cvssV3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 3.7,
"baseSeverity": "LOW",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"exploitabilityScore": 2.2,
"impactScore": 1.4
}
},
"lastModifiedDate": "2022-10-06T18:55Z",
"publishedDate": "2018-07-18T13:29Z"
}
}
}
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.
Loading…
Loading…